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CLAIMS 

1 . A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management^ apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating handling of said content 
data, 

said data providing apparatus provides said 
content data encrypted by using said content key data, 
and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said key file and determines the handling of 
said content data based on the related decrypted usage 
control policy data. 

2 . A data providing system as set forth in claim 
1 , wherein said management apparatus adds signature data 
for verification of the legitimacy of the producer of the 
key file to the key file. 

3 . A data providing system as set forth in claim 
1 , wherein said data providing apparatus prepares a 
content file storing the content data and provides the 
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content file to the data processing apparatus . 

4 . A data providing system as set forth in claim 
3, wherein said data providing apparatus adds signature 
data for verification of the legitimacy of the producer 

5 of the content file to the content file . 

5 . A data providing system as set forth in claim 
„ 1 , wherein 

W the data providing apparatus prepares usage 

J{J control policy data and sends it to said management 

Iri 10 apparatus , 

said data processing apparatus determines at 
least one of the purchase form and the usage form of the 

fy distributed content data based on the usage control 

O 

£i! policy data and sends log data showing the log of at 

15 least one of the purchase form and usage form decided to 
said management apparatus, and 

said management apparatus performs profit 
distribution processing for distributing the profit 
; obtained along with the purchase and usage of the content 

20 data in the data processing apparatus to the interested 
parties of the data providing apparatus based on the 
received log data . 

6. A data providing system for distributing 
content data from a data providing apparatus to a data 

2 5 processing apparatus and managing said data providing 
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apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating handling of said content 
data, 

said data providing apparatus distributes a 
module storing a content file storing the content data 
encrypted by using said content key data and said key 
file received from said management apparatus to said data 
processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed module and determines the 
handling of said content data based on the related 
decrypted usage control policy data. 

7 . A data providing system as set forth in claim 
6, wherein said management apparatus generates signature 
data for verifying the legitimacy of the producer of the 
key file and prepares the key file further storing that 
signature data. 

8 . A data providing system as set forth in claim 
6 , wherein 

the data providing apparatus generates said 
content key data and usage control policy data and sends 
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them to said management apparatus and 

said management apparatus prepares said key 
file based on said received content key data and usage 
control policy data and registers the prepared key file. 
5 9 . A data providing system as set forth in claim 

7 , wherein said data providing apparatus prepares 
signature data for verifying at least one of the 
legitimacy of a producer and distributor of the content 
key file and the distributor of the key file and 
10 distributes said module further storing the signature 
data to said data processing apparatus . 

10. A data providing system as set forth in claim 
9, wherein said data processing apparatus verifies the 
signature data stored in the module to verify at least 

15 one of the legitimacy of a producer and distributor of 
the content file and a producer and distributor of the 
key file . 

11 . A data providing system as set forth in claim 
6, wherein said management apparatus 

20 prepares said key file storing said content key 

file and said usage control policy data encrypted using 
distribution use key data and 

distributes said distribution use key data to 
said data processing apparatus . 

25 12 . A data providing system as set forth in claim 



6, wherein said management apparatus and said data 
processing apparatus comprise a plurality of distribution 
use key data of defined periods of validity and use 
distribution use key data of corresponding periods . 

13. A data providing system as set forth in claim 
11, wherein 

Raid data providing apparatus prepares 
signature data using its own secret key data and 

said data processing apparatus verifies the 
legitimacy of the signature data using public key data 
corresponding to said secret key data. 

14 . A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating handling of said content 
data , 

said data providing apparatus distributes a 
module storing a content file containing content data 
encrypted by using said content key data and the key file 
received from said management apparatus to said data 
processing apparatus , and 
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said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed module and determines the 
handling of said content data based on the related 
5 decrypted usage control policy data . 

15. A data providing system for distributing 
_ content data from a data providing apparatus to a data 

~Jf processing apparatus and managing said data providing 

%l apparatus and said data processing apparatus by a 

^ 10 management apparatus, wherein 

v * said management apparatus prepares a key file 

rj storing encrypted content key data and encrypted usage 

ry control policy data indicating handling of said content 

^ data , 

15 said data providing apparatus individually 

distributes the content file storing the content data 
encrypted by using said content key data and said key 
file received from said management apparatus to said data 
processing apparatus, and 
20 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
25 policy data. 
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16. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 

5 management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating handling of said content 
data and distributes the related prepared key file to 
10 said data processing apparatus , 

said data providing apparatus distributes a 
content file storing the content data encrypted by using 
said content key data to said data processing apparatus, 
and 

15 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 

20 policy data. 

17 . A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 

2 5 management apparatus, wherein 
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said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating handling of said content 
data, 

5 said data providing apparatus distributes a 

module storing the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data processing apparatus f 
and 

10 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed module and determines the 
handling of said content data based on the related 
decrypted usage control policy data . 

15 18 . A data . providing system for distributing 

content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

20 said management apparatus prepares a key file 

storing encrypted content key data and encrypted usage 
control policy data indicating handling of said content 
data , 

said data providing apparatus individually 
25 distributes the content data encrypted by using said 
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content key data and said key file received from said 
management apparatus to said data processing apparatus, 
and 

said data processing apparatus decrypts said 
5 content key data and said usage control policy data 

stored in said distributed key file and determines the 
handling of said distributed content data based on the 
u3 related decrypted usage control policy data, 

ifl 19. A data providing system for distributing 

ft; 10 content data from a data providing apparatus to a data 

v s processing apparatus and managing said data providing 

J!! apparatus and said data processing apparatus by a 

K management apparatus , wherein 

rt said management apparatus prepares a key file 

15 storing encrypted content key data and encrypted usage 
control policy data indicating handling of said content 
data and distributes the related prepared key file to 
said data processing apparatus, 

said data processing apparatus distributes the 
20 content data encrypted by using said content key data to 
said data processing apparatus, and 

£?aid data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
25 handling of said distributed content data based on the 
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related decrypted usage control policy data . 

20. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
5 apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares encrypted 
content key data and encrypted usage control policy data 
indicating handling of said content data, 

10 said data providing apparatus individually 

distributes the content data encrypted by using said 
content key data, said encrypted content key data 
received from said management apparatus, and said 
encrypted usage control policy data to said data 

15 processing apparatus, and 

said data processing apparatus decrypts said 
distributed content key data and said usage control 
policy data and determines the handling of the content 
data stored in said distributed content file based on the 

20 related decrypted usage control policy data. 

21 . A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 

2 5 management apparatus, wherein 
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said management: apparatus prepares encrypted 
content key data and encrypted usage control policy data 
indicating handling of said content data and distributes 
the same to said data processing apparatus , 
5 said data providing apparatus distributes the 

content data encrypted by using said content key data to 
said data processing apparatus, and 
ip said data processing apparatus decrypts said 

iff distributed content key data and said usage control 

iU 10 policy data and determines the handling of said 

ip distributed content data based on the related decrypted 

?~ usage control policy data . 

N 22 . A data providing system comprising a data 

**f providing apparatus, a data distribution apparatus, a 

15 data processing apparatus, and a management apparatus, 
wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
20 content data, 

said data providing apparatus provides said 
content data encrypted by using said content key data, 
said data distribution apparatus distributes 
said provided content data to said data processing 
25 apparatus, and 
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said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said key file and determines the handling of 
said distributed content data based on the related 
5 decrypted usage control policy data. 

23. A data providing system as set forth in claim 
22 , wherein 

said data providing apparatus provides a first 

module storing content data encrypted by using said 
10 content key data, said encrypted content key data, and 

encrypted usage control policy data showing the handling 

of the content data to said data distribution apparatus , 
said data distribution apparatus distributes a 

second module storing said encrypted content data, 
15 content key data, and usage control policy data stored in 

said received first module to said data processing 

apparatus , and 

said data processing apparatus decrypts said 

content key data and said usage control policy data 
20 stored in said distributed second module and determines 

the handling of said content data based on the related 

decrypted usage control policy data. 

24. A data providing system as set forth in claim 
22, wherein said data distribution apparatus prepares a 

25 second module including said provided first module and 




- 465 - 

distributes the prepared second module to said data 
processing apparatus . 

25. A data providing system as set forth in claim 
22 , wherein said data distribution apparatus distributes 

5 said second module further storing price data showing the 
price of the content data to said data processing 
apparatus . 

26. A data providing system as set forth in claim 
25, wherein said data distribution apparatus determines 

10 the price data based on a wholesale price determined for 
said content data by said data providing apparatus . 

27. A data providing system as set forth in claim 
22 , wherein said data providing apparatus provides a 
first module further storing signature data for verifying 

15 the legitimacy of a producer and transmitter of at least 
one data of the content data, content key data, and usage 
control policy data to said data distribution apparatus . 

28. A data providing system as set forth in claim 
22, wherein said data distribution apparatus provides 

20 said second module further storing signature data for 

verifying the legitimacy of a producer and transmitter of 
at least one data among the content data, content key 
data, and usage control policy data to said data 
processing apparatus. 

25 29. A data providing system as set forth in claim 
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22 , wherein 

said data processing apparatus determines at 
least one of the purchase form and the usage form of the 
distributed content data based on the usage control 
5 policy data and sends log data showing the log of at 

least one of the purchase form and usage form decided to 
^ said management apparatus and 

jM said management apparatus performs profit 

Jfj distribution processing for distributing the profit 

?/t 10 obtained along with the purchase and usage of the content 

/\ ; data in the data processing apparatus to the interested 

l~ parties of the data providing apparatus and data 

iu distribution apparatus based on the received log data. 

l1 30 . A data providing system as set forth in claim 

15 22, wherein 

said data processing apparatus sends 
distribution use log data relating to the distribution of 
the data distribution apparatus to said data distribution 
apparatus and 

20 said data distribution apparatus performs 

charge processing relating to that distribution based on 
the distribution use log data. 

31 . A data providing system for providing content 
data from a data providing apparatus to a data 

25 distribution apparatus, distributing the content data 
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from said data distribution apparatus to a data 
processing apparatus , and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
5 wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

10 said data providing apparatus provides a first 

module storing a content file storing the content data 
encrypted by using said content key data and said key 
file received from said management apparatus to said data 
distribution apparatus , 

15 said data distribution apparatus distributes a 

second module storing said provided content file and said 
key file to said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 

20 stored in said distributed second module and determines 
the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data. 

32 . A data providing system as set forth in claim 

2 5 31, wherein 
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said data providing apparatus produces said 
content key data and said usage control policy data and 
sends them to said management apparatus and 

said management apparatus produces said key 
5 file based on said received content key data and usage 
control policy data and registers said received content 
key data and usage control policy data, 
yg 33 . A data providing system as set forth in claim 

ill 31, wherein said data providing apparatus prepares 

fu 10 signature data for verifying at least one of the 

01 legitimacy of a producer and distributor of the content 

^ key file and the distributor of the key file and 

M distributes said first module further storing the 

^ signature data to said data processing apparatus . 

15 34 . A data providing system as set forth in claim 

31, wherein said data providing apparatus prepares 
signature data for verifying at least one of the 
legitimacy of a producer and distributor of the content 
key file and the distributor of the key file and 
20 distributes said second module further storing the 
signature data to said data processing apparatus . 

35 . A data providing system as set forth in claim 
33, wherein 

said data providing apparatus prepares 
25 signature data using its own secret key data and 



said data processing apparatus verifies the 
legitimacy of the signature data using public key data 
corresponding to said secret key data. 

36. A data providing system as set forth in claim 
33 , wherein 

said data providing apparatus distributes said 
module further storing public key certificate data for 
certifying the legitimacy of the public key data to said 
data processing apparatus and 

said data processing apparatus verifies the 
signature data using the public key data stored in the 
distributed public key certificate data. 

37 . A data providing system as set forth in claim 
36, wherein 

said management apparatus distributes public 
key certificate data for certifying the legitimacy of the 
public key data to said data processing apparatus and 

said data processing apparatus verifies the 
signature data using the public key data stored in the 
distributed public key certificate data. 

38 . A data providing system as set forth in claim 
33, wherein 

said data distribution apparatus prepares said 
signature data using its own secret key data and 

said data processing apparatus verifies the 
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legitimacy of the signature data using public key data 
corresponding to said secret key data. 

39. A data providing system as set forth in claim 
38, wherein 

5 said data distribution apparatus distributes 

said module further storing public key certificate data 
for certifying the legitimacy of the public key data to 
said data processing apparatus and 

said data processing apparatus verifies the 
10 signature data using the public key data stored in the 
distributed public key certificate data. 

40. A data providing system as set forth in claim 
38, wherein 

said management apparatus distributes said 
15 public key certificate data for certifying the legitimacy 
of the public key data to said data processing apparatus 
and 

said data processing apparatus verifies the 
signature data using the public key data stored in the 
20 distributed public key certificate data. 

41. A data providing system as set forth in claim 
31 , wherein 

said data processing apparatus determines at 
least one of the purchase form and the usage form of the 
25 distributed content data based on the usage control 



policy data and sends log data showing the log of at 
least one of the purchase form and usage form decided to 
said management apparatus , and 

said management apparatus performs profit 
distribution processing for distributing the profit 
obtained along with the purchase and usage of the content 
data in the data processing apparatus to the interested 
parties of the data providing apparatus and the data 
distribution apparatus based on the received log data. 

42 . A data providing system as set forth in claim 
31, wherein said data distribution apparatus distributes 
said second module further storing price data showing the 
price of the content data to said data processing 
apparatus . 

43. A data providing system as set forth in claim 
42, wherein said management apparatus registers the price 
data received from said data distribution device. 

44. A data providing system as set forth in claim 
31, wherein said data processing apparatus comprises a 
module giving resistance to outside monitoring and 
tampering of the processing content, predetermined data 
stored in an internal memory, and data being processed. 

45. A data providing system for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
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from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
5 wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data , 

10 said data providing apparatus provides a first 

module storing a content file containing the content data 
encrypted by using said content key data and a key file 
received from said management apparatus to said data 
distribution apparatus , 

15 said data distribution apparatus distributes a 

second module storing said provided content file to said 
data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 

20 stored in said distributed second module and determines 
the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data. 

46. A data providing system for providing content 

2 5 data from a data providing apparatus to a data 
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distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
5 data processing apparatus by a management apparatus, 
wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
10 content data, 

said data providing apparatus individually 
distributes a content file storing the content data 
encrypted by using said content key data and said key 
file received from said management apparatus to said data 
15 distribution apparatus, 

said data distribution apparatus individually 
distributes said distributed content file and key file to 
said data processing apparatus, and 

said data processing apparatus decrypts said 
20 content key data and said usage control policy data 

stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

25 47 . A data providing system as set forth in claim 
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46, wherein said content file and said key file include 
data for clearing indicating their mutual correspondence . 

48. A data providing system for distributing 
content data from a data providing apparatus to a data 
5 processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
10 control policy data indicating the handling of said 

content data and distributes the related prepared key 
file to said data processing apparatus, 

said data providing apparatus provides a 
content file storing the content data encrypted by using 
15 said content key data to said data distribution 
apparatus , 

said data distribution apparatus distributes 
said provided content file to said data processing 
apparatus , and 

20 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 

25 policy data. 



49. A data providing system as set forth in claim 
48, wherein said content file and said key file include 
data for clearing indicating their mutual correspondence . 

50 . A data providing system for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

said data providing apparatus provides a first 
module storing the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data distribution apparatus, 

said data distribution apparatus distributes a 
second module storing said provided content data and said 
key file to said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed second module and determines 
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the handling of said content: data stored in said 
distributed second module based on the related decrypted 
usage control policy data. 

51 . A data providing system for providing content 
5 data from a data providing apparatus to a data 

distribution apparatus , distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
UH apparatus, said data distribution apparatus, and said 

Ty 10 data processing apparatus by a management apparatus, 

tf 1 wherein 

JlT said management apparatus prepares a key file 

W storing encrypted content key data and encrypted usage 

control policy data indicating the handling of said 
15 content data, 

said data providing apparatus individually 
distributes the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data distribution apparatus , 
20 said data distribution apparatus individually 

distributes said distributed content data and said key 
file to said data distribution apparatus , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
25 stored in r>aid distributed key file and determines the 



handling of said distributed content data based on the 
related decrypted usage control policy data. 

52 . A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data and distributes the related prepared key 
file to said data processing apparatus , 

said data processing apparatus provides the 
content data encrypted by using said content key data to 
said data distribution apparatus , 

said data distribution apparatus distributes 
said provided content data to said data processing 
apparatus , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said distributed content data based on the 
related decrypted usage control policy data. 

53 . A data providing system for providing content 
data from a data providing apparatus to a data 
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distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
wherein 

said management apparatus provides encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data to said data 
providing apparatus , 

said data providing apparatus individually 
distributes the content data encrypted by using said 
content key data and said encrypted content key data and 
said encrypted usage control policy data received from 
said management apparatus to said data distribution 
apparatus , 

said data distribution apparatus individually 
distributes said distributed content data, said encrypted 
content key data, and said encrypted usage control policy 
data to said data distribution apparatus, and 

said data processing apparatus decrypts said 
distributed content key data and said usage control 
policy data and determines the handling of said 
distributed content data based on the related decrypted 
usage control policy data. 
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54 . A data providing system for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
wherein 

said management apparatus provides encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data to said data 
processing apparatus , 

said data providing apparatus provides the 
content data encrypted by using said content key data to 
said data distribution apparatus, 

said data distribution apparatus distributes 
said provided content data to said data processing 
apparatus , and 

said data processing apparatus decrypts said 
distribute said content key data and said usage control 
policy data and determines the handling of said 
distributed content data based on the related decrypted 
usage control policy data. 

55. A data providing apparatus, a data distribution 
apparatus, a management apparatus, and a data processing 
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apparatus , wherein 

said data providing apparatus provides master 
source data of content to said management apparatus , 
said management apparatus manages said data 
5 providing apparatus, said data distribution apparatus, 
and said data processing apparatus, encrypts said 
provided master source data by using content key data to 
prepare content data, prepares a content file storing the 
related content data, prepares a key file storing said 
10 encrypted content key data and encrypted usage control 

policy data indicating the handling of said content data, 
and provides said content file and said key file to said 
data distribution apparatus, 

said data distribution apparatus distributes 
15 said provided content file and said key file to said data 
processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
20 handling of the content data stored in said distributed 

content file based on the related decrypted usage control 
policy data . 

56. A data providing system as set forth in claim 
55 , wherein 

25 said management apparatus prepares a first 
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module storing said content file and said key file and 
provides said first module to said data distribution 
apparatus and 

said data distribution apparatus produces a 
5 second module storing said content file and said key file 
stored in said first module and distributes it to said 
data processing apparatus . 

57 . A data providing system as set forth in claim 
MJ 55 , wherein said management apparatus 

f'^j 10 comprises at least one database among a 

9* database for storing and managing said content file, a 

JIT database for storing and managing said key file, and a 

database for storing and managing said usage control 
^ policy data and 

15 centrally manages at least one among said 

content file, said key file, and said usage control 
policy data by using a content identifier uniquely 
allocated to said content data . 

58 . A data providing system comprising a data 
20 providing apparatus, a data distribution apparatus, a 
management apparatus, and a data processing apparatus, 
wherein 

said data providing apparatus provides master 
source data of content to said management apparatus , 
2 5 said management apparatus manages said data 
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providing apparatus , said data distribution apparatus , 
and said data processing apparatus, encrypts said 
provided master source data by using content key data to 
prepare content data, prepares a content file storing the 
related content data, prepares a key file storing said 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data, 
provides said content file to said data distribution 
apparatus , and provides said key file to said data 
processing apparatus , 

said data distribution apparatus distributes 
said provided content file to said data processing 
apparatus , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

59. A data providing system comprising a data 
providing apparatus, a data distribution apparatus, a 
management apparatus, and a data processing apparatus, 
wherein 

said data providing apparatus provides a 
content file storing encrypted content data using content 
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key data to said management apparatus , 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
and said data processing apparatus, prepares a key file 
5 storing said encrypted content key data and encrypted 

usage control policy data indicating the handling of said 
content data, and provides said content file provided 
43 from said data providing apparatus and said prepared key 

7 re? 

If! file to said data distribution apparatus , 

fy 10 said data distribution apparatus distributes 

pi said provided content file and said key file to said data 

t>~ processing apparatus , and 

P said data processing apparatus decrypts said 

H content key data and said usage control policy data 

15 stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

60 . A data providing system as set forth in claim 
20 59, wherein 

said management apparatus prepares a first 
module storing said content file and said key file and 
provides said first module to said data distribution 
apparatus and 

25 said data distribution apparatus produces a 
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second module storing said content file and said key file 
stored in said first module and distributes it to said 
data processing apparatus. 

61 . A data providing system comprising a data 
5 providing apparatus, a data distribution apparatus, a 
management apparatus, and a data processing apparatus, 
wherein 

\D said data providing apparatus provides a 

if?? 

ifl content file storing encrypted content data using content 

f'U 10 key data to said management apparatus, 

said management apparatus manages said data 
~.Z_ providing apparatus, said data distribution apparatus, 

'ffz and said data processing apparatus, prepares a key file 

_?2 storing said encrypted content key data and encrypted 

15 usage control policy data indicating the handling of said 
content data, provides said content file provided from 
said data providing apparatus to said data distribution 
apparatus, and provides said prepared key file to said 
data processing apparatus, 
20 said data distribution apparatus distributes 

said provided content file to said data processing 
apparatus , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
2 5 stored in said provided key file and determines the 
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handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

62 . A data providing system comprising a data 
providing apparatus, a data distribution apparatus , a 
management apparatus , a database device , and a data 
processing apparatus, wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file and a key file provided 
from said management apparatus in said database device, 

said management apparatus prepares the key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, and provides the related prepared key file 
to said data providing apparatus , 

said data distribution apparatus distributes 
said content file and key file obtained from said 
database device to said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
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policy data . 

63 . A data providing system comprising a data 
providing apparatus , a data distribution apparatus , a 
management apparatus , a database device , and a data 
5 processing apparatus, wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file in said database 
10 device, 

said management apparatus prepares the key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 

15 to said data distribution apparatus, 

said data distribution apparatus distributes 
said content file obtained from said database device and 
the key file provided from said data distribution 
apparatus to said data processing apparatus, and 

20 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 

2 5 policy data. 
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64 . A data providing system comprising a data 
providing apparatus, a data distribution apparatus, a 
management apparatus, a database device, and a data 
processing apparatus, wherein 
5 said data providing apparatus encrypts content 

data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file in said database 
device , 

10 said management apparatus prepares the key file 

storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data processing apparatus, 

15 said data distribution apparatus distributes 

said content file obtained from said database device and 
the key file provided from said data distribution 
apparatus to said data processing apparatus, and 

said data processing apparatus decrypts said 

20 content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

25 65. A data providing system comprising a plurality 
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of data providing apparatuses f a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 
said data providing apparatuses encrypt content 
5 data by using content key data, prepare content files 

storing the related encrypted content data, and store the 
related prepared content files and key files provided 
from corresponding management apparatuses in said 
database device, 

10 said management apparatuses prepare key files 

storing said encrypted content key data and the encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses , and provide the 

15 related prepared key files to corresponding data 
providing apparatuses , . 

said data distribution apparatus distributes 
said content files and key files obtained from said 
database device to said data processing apparatus , and 

2 0 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 

25 control policy data. 



- 489 - 

66. A data providing system comprising a plurality 
of data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 
5 said data providing apparatuses encrypt content 

data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files in said database device, 
said management apparatuses prepare key files 

10 storing said encrypted content key data and the encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses , and provide the 
related prepared key files to said data distribution 

15 apparatus , 

said data distribution apparatus distributes 
said content files obtained from said database device and 
the key files provided from said management apparatus to 
said data processing apparatus, and 

20 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 

2 5 control policy data. 
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67 . A data providing system comprising a plurality 
of data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses encrypt content 
data by using conteint key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files in said database device, 

said management apparatuses prepare key files 
storing said encrypted content key data and the encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses , and provide the 
related prepared key files to said data processing 
apparatus , 

said data distribution apparatus distributes 
said content files obtained from said database device to 
said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 
control policy data. 

68 . A data providing system comprising a plurality 



of data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files and key files 
received from the related management apparatuses in said 
database , 

said management apparatuses encrypt said master 
sources received from corresponding data providing 
apparatuses by using content key data, prepare the 
content files storing the related encrypted content data, 
prepare key files storing said encrypted content key data 
and encrypted usage control policy data indicating the 
handling of said content data for the content data 
provided by corresponding data providing apparatuses , and 
send said prepared content files and said prepared key 
files to corresponding data providing apparatuses, 

said data distribution apparatus distributes 
said content files and key files obtained from said 
database device to said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
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content files based on the related decrypted usage 
control policy data. 

69. A data providing system comprising a plurality 
of data providing apparatuses, a data distribution 
5 apparatus , a plurality of management apparatuses , a 

database device, and a data processing apparatus, wherein 
said data providing apparatuses provide master 

Hi 5 ** 

sources of content data to corresponding management 
111 apparatuses, and store content files received from the 

I'M 10 related management apparatuses in said database, 

said management apparatuses encrypt said master 
^ sources received from corresponding data providing 

If: apparatuses by using content key data, prepare the 

g content files storing the related encrypted content data, 

15 send the related prepared content files to said data 
providing apparatuses, prepare key files storing said 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data 
for the content data provided by corresponding data 
20 providing apparatuses, and send said prepared key files 
to corresponding data distribution apparatus, 

said data distribution apparatus distributes 
said content files obtained from said database device and 
the key files provided from said management apparatuses 
25 to said data processing apparatus, and 
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said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
5 content files based on the related decrypted usage 
control policy data. 

70. A data providing system comprising a plurality 
of data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 

10 database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files received from the 
related management apparatuses in said database , 

15 said management apparatuses encrypt said master 

sources received from corresponding data providing 
apparatuses by using content key data, prepare the 
content files storing the related encrypted content data, 
send the related prepared content files to said data 

20 providing apparatuses, prepare key files storing said 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data 
for the content data provided by corresponding data 
providing apparatuses , and send said prepared key files 

25 to said data processing apparatus, 
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said data distribution apparatus distributes 
said content files obtained from said database device and 
the key files provided from said management apparatuses 
to said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 
control policy data. 

71 . A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data , 

said data providing apparatus provides said 
content data encrypted by using said content key data, 
and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said key file and determines the handling of 
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said content data based on the related decrypted usage 
control policy data. 

72 . A data providing method for distributing 
content data from a data providing apparatus to a data 

5 processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
10 usage control policy data indicating the handling of said 
content data , 

distributing said prepared key file from said 
management apparatus to said data providing apparatus , 
distributing a module storing a content file 
15 storing the content data encrypted by using said content 
key data and said key file distributed from said 
management apparatus from said data providing apparatus 
to said data processing apparatus, and 

in said data processing apparatus, decrypting 
20 said content key data and said usage control policy data 
stored in said distributed module and determining the 
handling of said content data based on the related 
decrypted usage control policy data. 

73 . A data providing method for distributing 

2 5 content data from a data providing apparatus to a data 
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processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , comprising the steps of , 

in said management apparatus , preparing a key 
5 file storing encrypted content key data and encrypted 

usage control policy data indicating the handling of said 
content data , 

in said data providing apparatus, distributing 
jfj a module storing a content file containing the content 

fy 10 data encrypted by using said content key data and the key 

ffl file received from said management apparatus to said data 

|db processing apparatus, and 

O in said data processing apparatus, decrypting 

G3 said content key data and said usage control policy data 

15 stored in said distributed module and determining the 
handling of said content data based on the related 
decrypted usage control policy data. 

74. A data providing method for distributing 
content data from a data providing apparatus to a data 
20 processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
2 5 usage control policy data indicating the handling of said 
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content data, 

distributing the related key file from said 
management apparatus to said data providing apparatus , 
individually distributing a content file 
5 storing the content data encrypted by using said content 
key data and said key file received from said management 
apparatus from said data providing apparatus to said data 
g processing apparatus, and 

1 in said data processing apparatus , decrypting 

j 10 said content key data and said usage control policy data 

~* stored in said distributed key file and determining the 

* handling of the content data stored in said distributed 

* content file based on the related decrypted usage control 
i policy data. 

15 75 . A data providing method for distributing 

content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

20 in said management apparatus, preparing a key 

file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data , 

distributing the related key file from said 

25 management apparatus to said data processing apparatus, 
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distributing a content file storing the content 
data encrypted by using said content key data from said 
data providing apparatus to said data processing 
appar a tu s , and 

5 in said data processing apparatus, decrypting 

said content key data and said usage control policy data 
stored in said distributed key file and determining the 
¥=? handling of the content data stored in said distributed 

Ml content file based on the related decrypted usage control 

10 policy data. 

76. A data providing method for distributing 
~ content data from a data providing apparatus to a data 

}T\ processing apparatus and managing said data providing 

2 apparatus and said data processing apparatus by a 

15 management apparatus, comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

20 in said data providing apparatus, distributing 

a module storing the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data processing apparatus, 
and 

2 5 in said data processing apparatus, decrypting 
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said content key data and said usage control policy data 
stored in said distributed module and determining the 
handling of said content data based on the related 
decrypted usage control policy data . 
5 77. A data providing method for distributing 

content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

10 in said management apparatus, preparing a key 

file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

in said data providing apparatus , individually 

15 distributing the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data processing apparatus, 
and 

in said data processing apparatus, decrypting 
20 said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of said distributed content data based on the 
related decrypted usage control policy data . 

78. A data providing method for distributing 
2 5 content data from a data providing apparatus to a data 
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processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus, preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

distributing the related prepared key file to 
said data processing apparatus, 

in said data providing apparatus, distributing 
the content data encrypted by using said content key data 
to said data processing apparatus, and 

in said data processing apparatus , decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of said distributed content data based on the 
related decrypted usage control policy data. 

79. A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data, 
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in said data providing apparatus , Individually 
distributing the content data encrypted by using said 
content key data and said encrypted content key data and 
said encrypted usage control policy data received from 
said management apparatus to said data processing 
apparatus , and 

in said data processing apparatus, decrypting 
said distributed content key data and said usage control 
policy data and determining the handling of the content 



i** 10 data stored in said distributed content file based on the 

V s - related decrypted usage control policy data. 

f!T 80 . A data providing method for distributing 

l7z content data from a data providing apparatus to a data 

T2 processing apparatus and managing said data providing 

15 apparatus and said data processing apparatus by a 
management apparatus,, comprising the steps of, 

in said management apparatus , preparing 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data 
2 0 and distributing the same to said data processing 
apparatus , 

in said data providing apparatus, distributing 
the content data encrypted by using said content key data 
to said data processing apparatus, and 
25 in said data processing apparatus, decrypting 
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said distributed content key data and said usage control 
policy data and determining the handling of said 
distributed content data based on the related decrypted 
usage control policy data . 

81 . A data providing method using a data providing 
apparatus , a data distribution apparatus , a data 
processing apparatus, and a management apparatus, 
comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data , 

providing said content data encrypted by using 
said content key data from said data providing apparatus 
to said data distribution apparatus, 

in said data distribution apparatus, 
distributing said provided content data to said data 
processing apparatus , and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said key file and determining the handling of 
said distributed content data based on the related 
decrypted usage control policy data. 

82 . A data providing method for providing content 
data from a data providing apparatus to a data 
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distribution apparatus , distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , preparing a key- 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

distributing the related prepared key file from 
said management apparatus to said data providing 
apparatus , 

providing a first module storing a content file 
storing the content data encrypted by using said content 
key data and said key file received from said management 
apparatus from said data providing apparatus to said data 
distribution apparatus, and 

distributing a second module storing said 
provided content file and said key file from said data 
distribution apparatus to said data processing apparatus, 
and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed second module and determining 
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-the handling of said content data stored In said 
distributed second module based on the related decrypted 
usage control policy data . 

83 . A data providing method for providing content 
5 data from a data providing apparatus to a data 

distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
10 data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
15 content data, 

in said data providing apparatus, providing a 
first module storing a content file containing the 
content data encrypted by using said content key data and 
a key file received from said management apparatus to 
20 said data distribution apparatus, 

in said data distribution apparatus, 
distributing a second module storing said provided 
content file to said data processing apparatus, and 

in said data processing apparatus, decrypting 
25 said content key data and said usage control policy data 
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stored in said distributed second module and determining 
the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data. 

84. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus , said data distribution apparatus , and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus, preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

distributing said prepared key file from said 
management apparatus to said data providing apparatus , 

individually distributing a content file 
storing the content data encrypted by using said content 
key data and said key file received from said management 
apparatus from said data providing apparatus to said data 
distribution apparatus , 

individually distributing said distributed 
content file and said key file from said data 
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distribution apparatus to said data distribution 
apparatus , and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

85 . A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data , 

distributing the related prepared key file from 
said management apparatus to said data processing 
apparatus , 

providing a content file storing the content 
data encrypted by using said content key data from said 
data providing apparatus to said data distribution 
apparatus , and 

distributing said provided content file from 
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said data distribution apparatus to said data processing 
apparatus , and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

86. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

in said data providing apparatus , providing a 
first module storing the content data encrypted by using 
said content key data and said key file received from 
said management apparatus to said data distribution 
apparatus , 
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in said data distribution apparatus , 
distributing a second module storing said provided 
content data and said key file to said data processing 
apparatus , and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed second module and determining 
the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data . 

87 . A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus , distributing the content data 
from said data distribution apparatus to a data 
processing apparatus , and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

in said data providing apparatus , individually 
distributing the content data encrypted by using said 
content key data and said key file received from said 
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management: apparatus to said data distribution apparatus, 

in said data distribution apparatus, 
individually distributing said distributed content data 
and said key file to said data distribution apparatus, 
and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of said distributed content data based on the 
related decrypted usage control policy data. 

88 . A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and distributing the related prepared key 
file to said data processing apparatus, 

in said data providing apparatus , providing the 
content data encrypted by using said content key data to 
said data distribution apparatus, 

in said data distribution apparatus , 
distributing said provided content data to said data 
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processing apparatus, and 

In said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
5 handling of said distributed content data based on the 
related decrypted usage control policy data. 

89. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 

10 from said data distribution apparatus to a data 

processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

15 in said management apparatus, providing 

encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data 
to said data providing apparatus , 

in said data providing apparatus , individually 

20 distributing the content data encrypted by using said 

content key data and said encrypted content key data and 
said encrypted usage control policy data which are 
received from said management apparatus to said data 
distribution apparatus , 

2 5 in said data distribution apparatus, 



individually distributing said distributed content data, 
said encrypted content key data, and said encrypted usage 
control policy data to said data distribution apparatus, 
and 

in said data processing apparatus, decrypting 
said distributed content key data and said usage control 
policy data and determining the handling of said 
distributed content data based on the related decrypted 
usage control policy data. 

90 . A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus , 
comprising the steps of, 

in said management apparatus, distributing 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data 
to said data processing apparatus, 

in said data providing apparatus, distributing 
the content data encrypted by using said content key data 
to said data distribution apparatus, 

in said data distribution apparatus, 
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distributing said provided content data to said data 
processing apparatus , and 

in said data processing apparatus , decrypting 
said distributed content key data and said usage control 
5 policy data and determining the handling of said 

distributed content data based on the related decrypted 
usage control policy data . 

91 . A data providing method using a data providing 
apparatus , a data distribution apparatus, a management 
10 apparatus, and a data processing apparatus, wherein 

said data providing apparatus provides master 
source data of content to said management apparatus, 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
15 and said data processing apparatus, encrypts said 

provided master source data by using content key data to 
prepare content data, prepares a content file storing the 
related content data, prepares a key file storing said 
encrypted content key data and encrypted usage control 
20 policy data indicating the handling of said content data, 
and provides said content file and said key file to said 
data distribution apparatus, 

said data distribution apparatus distributes 
said provided content file and said key file to said data 
25 processing apparatus, and 
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said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
5 content file based on the related decrypted usage control 
policy data . 

92 . A data providing method using a data providing 
apparatus, a data distribution apparatus, a management 
apparatus, and a data processing apparatus, wherein 

10 said data providing apparatus provides master 

source data of content to said management apparatus , 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
and said data processing apparatus, encrypts said 

15 provided master source data by using content key data to 
prepare content data, prepares a content file storing the 
related content data, prepares a key file storing said 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data, 

20 and provides said content file to said data distribution 
apparatus and provides said key file to said data 
processing apparatus , 

said data distribution apparatus distributes 
said provided content file to said data processing 

25 apparatus, and 
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said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of the content data stored in said distributed 
5 content file based on the related decrypted usage control 
policy data . 

93 . A data providing method using a data providing 
apparatus, a data distribution apparatus, a management 
apparatus, and a data processing apparatus , wherein 
10 said data providing apparatus provides a 

content file storing encrypted content data using content 
key data to said management apparatus, 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
15 and said data processing apparatus, prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, provides said content file provided from 
said data providing apparatus and said prepared key file 
20 to said data distribution apparatus, 

said data distribution apparatus distributes 
said provided content file and said key file to said data 
processing apparatus, and 

said data processing apparatus decrypts said 
2 5 content key data and said usage control policy data 
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stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

5 94 . A data providing method using a data providing 

apparatus f a data distribution apparatus , a management 
apparatus f and a data processing apparatus, wherein 
said data providing apparatus provides a 
if. content file storing encrypted content data using content 

fy 10 key data to said management apparatus , 

ni said management apparatus manages said data 

providing apparatus, said data distribution apparatus, 
O and said data processing apparatus, prepares a key file 

E3 storing said encrypted content key data and encrypted 

15 usage control policy data indicating the handling of said 
content data, provides said content file provided from 
said data providing apparatus to said data distribution 
apparatus, and provides said prepared key file to said 
data processing apparatus, 
20 said data distribution apparatus distributes 

said provided content file to said data processing 
apparatus , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
25 stored in said provided key file and determines the 
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handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

95 . A data providing method using a data providing 
5 apparatus, a data distribution apparatus, a management 
apparatus, a database device, and a data processing 
apparatus , wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
10 storing the related encrypted content data, and stores 

the related prepared content file and a key file provided 
from said management apparatus in said database device, 
said management apparatus prepares a key file 
storing said encrypted content key data and encrypted 
15 usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data providing apparatus , 

said data distribution apparatus distributes 
said content file and key file obtained from said 
20 database device to said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
2 5 content file based on the related decrypted usage control 
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policy data. 

96. A data providing method using a data providing 
apparatus, a data distribution apparatus, a management 
apparatus, a database device, and a data processing 
5 apparatus , wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file in said database 
10 device, 

said management apparatus prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 

15 to said data distribution apparatus, 

said data distribution apparatus distributes 
said content file obtained from said database device and 
the key file provided from said data distribution 
apparatus to said data processing apparatus, and 

20 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 

2 5 policy data. 



- 518 - 

97 . A data providing method using a data providing 
apparatus , a data distribution apparatus , a management 
apparatus, a database device, and a data processing 
apparatus , wherein 
5 said data providing apparatus encrypts content 

data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file in said database 
device , 

10 said management apparatus prepares a key file 

storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data processing apparatus , 

15 said data distribution apparatus distributes 

said content file obtained from said database device and 
the key file provided from said data distribution 
apparatus to said data processing apparatus, and 

said data processing apparatus decrypts said 

2 0 content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

25 98. A data providing method using a plurality of 



519 - 



data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 
said data providing apparatuses encrypt content 
5 data by using content key data, prepare content files 

storing the related encrypted content data, and store the 
related prepared content files and key files provided 
from corresponding management apparatuses in said 
database device , 

10 said management apparatuses prepare the key 

files storing said encrypted content key data and 
encrypted usage control policy data indicating the 
handling of said content data for the content data 
provided by corresponding data providing apparatuses and 

15 provide the related prepared key files to corresponding 
data providing apparatuses, 

said data distribution apparatus distributes 
said content files and key files obtained from said 
database device to said data processing apparatus, and 

20 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 

2 5 control policy data. 
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99. A data providing method using a plurality of 
data providing apparatuses , a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus , wherein 

said data providing apparatuses encrypt content 
data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files in said database device, 

said management apparatuses prepare the key 
files storing said encrypted content key data and 
encrypted usage control policy data indicating the 
handling of said content data for the content data 
provided by corresponding data providing apparatuses and 
provide the related prepared key files to said data 
distribution apparatus , 

said data distribution apparatus distributes 
said content files obtained from said database device and 
the key files provided from said management apparatuses 
to said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 
control policy data. 
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100 . A data providing method using a plurality of 
data providing apparatuses , a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses encrypt content 
data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files in said database device, 

said management apparatuses prepare the key 
files storing said encrypted content key data and 
encrypted usage control policy data indicating the 
handling of said content data for the content data 
provided by corresponding data providing apparatuses and 
provide the related prepared key files to said data 
processing apparatus, 

said data distribution apparatus distributes 
said content files obtained from said database device to 
said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 
control policy data . 

101. A data providing method using a plurality of 
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data providing apparatuses, a data distribution 
apparatus, a plurality of management apparatuses, a 
database device, and a data processing apparatus, wherein 
said data providing apparatuses provide master 
5 sources of content data to corresponding management 
apparatuses and store content files and key files 
received from the related management apparatuses in said 
database , 

said management apparatuses encrypt said master 

10 sources received from corresponding data providing 

apparatuses by using content key data, prepare content 
files storing the related encrypted content data, prepare 
key files storing said encrypted content key data and 
encrypted usage control policy data indicating the 

15 handling of said content data for the content data 

provided by corresponding data providing apparatuses, and 
send said prepared content files and said prepared key 
files to corresponding data providing apparatuses , 

said data distribution apparatus distributes 

20 said content files and key files obtained from said 

database device to said data processing apparatus, and 
said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 

2 5 handling of the content data stored in said distributed 
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content files based on the related decrypted usage 
control policy data. 

102 . A data providing method using a plurality of 
data providing apparatuses , a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files received from the 
related management apparatuses in said database, 

said management apparatuses encrypt said master 
sources received from corresponding data providing 
apparatuses by using content key data, prepare content 
files storing the related encrypted content data, send 
the related prepared content files to said data providing 
apparatuses, prepare key files storing said encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data for the 
content data provided by corresponding data providing 
apparatuses , and send the related prepared key files to 
corresponding data distribution apparatus, 

said data distribution apparatus distributes 
said content files obtained from said database device and 
key files provided from said management apparatuses to 
said data processing apparatus , and 
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said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
5 content files based on the related decrypted usage 
control policy data. 

103. A data providing method using a plurality of 
data providing apparatuses, a data distribution 
apparatus , . a plurality of management apparatuses , a 

10 database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files received from the 
related management apparatuses in said database , 

15 said management apparatuses encrypt said master 

sources received from corresponding data providing 
apparatuses by using content key data, prepare content 
files storing the related encrypted content data, send 
the related prepared content files to said data providing 

20 apparatuses, prepare key files storing said encrypted 

content key data and encrypted usage control policy data 
indicating the handling of said content data for the 
content data provided by corresponding data providing 
apparatuses, and provide the related prepared key files 

2 5 to said data processing apparatus, 
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said data distribution apparatus distributes 
said content files obtained from said database device to 
said data processing apparatus, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 
control policy data . 

104. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus, wherein 

said data providing apparatus distributes a 
module storing the content data encrypted by using 
content key data, said encrypted content key data, and 
encrypted usage control policy data indicating the 
handling of said content data to said data processing 
apparatus by using a predetermined communication protocol 
in a format not depending upon the related communication 
protocol or by recording the same on a storage medium, 
and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed module and determines the 
handling of said content data based on the related 



- 526 - 

decrypted usage control policy data. 

105. A data providing system as set forth in claim 
104, wherein said data providing apparatus distributes 
said module further storing signature data for verifying 
5 a legitimacy of a producer and a transmitter of at least 
one data among said content data, said content key data, 
p and said usage control policy data to said data 

S3 processing apparatus. 

CP 106. A data providing system as set forth in claim 

^ 10 104, wherein 

? said data providing apparatus distributes said 

M module further storing at least one data between data for 

::f verifying if the related data is not tampered with and 

? ~ signature data for verifying if the related data was 

15 normally certified by a predetermined manager for at 

least one data among said content data, said content key 
data, and said usage control policy data to said data 
processing apparatus . 

107. A data providing system as set forth in claim 
20 104, wherein 

said data processing apparatus determines a 
purchase form of said content data based on said usage 
control policy data, and 

where said content data is transferred to 
25 another data processing apparatus, the signature data 
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indicating the legitimacy of the purchaser of the related 
content data and the signature data indicating the 
legitimacy of the transmitter of the related content data 
are made different. 
5 108. A data providing system as set forth in claim 

104, wherein said data providing apparatus produces 
^ signature data using secret key data of said data 

gf providing apparatus and a hash function . 

}tj 109. A data providing system for distributing 

y\ 10 content data from a data providing apparatus to a data 

v " processing apparatus and managing said data providing 

i^i apparatus and said data processing apparatus by a 

fff management apparatus , wherein 

ljl said management apparatus prepares a key file 

15 storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

said data providing apparatus distributes a 
module storing a content file storing the content data 
20 encrypted by using said content key data and said key 

file received from said management apparatus to said data 
processing apparatus by using a predetermined 
communication protocol in a format not depending upon the 
related communication protocol or by recording the same 
2 5 on a storage medium, and 
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said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed module and determines the 
handling of said content data based on the related 
decrypted usage control policy data. 

110. A data providing system as set forth in claim 
109, wherein said management apparatus produces signature 
data for verifying the legitimacy of the producer of said 
key file and prepares said key file further storing the 
related signature data. 

111 . A data providing system as set forth in claim 

109 , wherein 

said data providing apparatus produces said 
content key data and said usage control policy data and 
transmits the same to said management apparatus, and 

said management apparatus prepares said key 
file based on said received content key data and usage 
control policy data and registers the related prepared 
key file . 

112 . A data providing system as set forth in claim 

110, wherein said data providing apparatus produces 
signature data for verifying at least one of the 
legitimacy of a producer and transmitter of said content 
file and a distributor of said key file and distributes 
said module further storing said signature data to said 
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data processing apparatus . 

Ii3. A data providing system as set forth in claim 
112, wherein said data processing apparatus verifies the 
signature data stored in said module to confirm at least 
5 one of the legitimacy of a producer and distributor of 

said content file and a producer and distributor of said 
_ key file. 

jff 114. A data providing system as set forth in claim 

■jjj 109 , wherein said data providing apparatus further stores 

- LI 

l~* 10 in said content file expansion use software for expanding 

U\ 

the content data when the content data is compressed. 
m 115. A data providing system as set forth in claim 

m 109, wherein said data providing apparatus further stores 

il in said content file an electronic watermark information 

15 module including information used for detecting said 
electronic watermark information when electronic 
watermark information is buried in said content file. 

116. A data providing system as set forth in claim 
109, wherein said data providing apparatus stores 

20 metadata relating to the explanation of the content Of 
the content data in said content file or distributes it 
separately from the content file to said data processing 
apparatus . 

117 . A data providing system as set forth in claim 
25 109, wherein 
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said management: apparatus produces said key 
file storing said content file data and said usage 
control policy data encrypted using said distribution use 
key data . 

5 118. A data providing system as set forth in claim 

117, wherein said management apparatus and said data 
processing apparatus comprise a plurality of distribution 
use key data of defined periods of validity and use 
m distribution use key data of corresponding periods . 

XT - 

fy 10 119. A data providing system as set forth in claim 

CP 109, wherein said management apparatus produces said key 

H 1 file further storing data describing the grammar of said 

y usage policy control data. 

W 120. A data providing system as set forth in claim 

15 109, wherein 

said management apparatus distributes data 
showing information for reading the content file and the 
key file, that is, a file reader, to said data processing 
apparatus and 

20 said data processing apparatus reads said 

content file and said key file based on the file reader. 

121 . A data providing system as set forth in claim 
109, wherein 

said data providing apparatus distributes data 
2 5 showing information for reading the content file and the 
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key file, that is, a file reader, to said data processing 
apparatus and 

said data processing apparatus reads said 
content file and said key file based on the file reader . 
5 122 . A data providing system as set forth in claim 

113, wherein 

said data providing apparatus produces said 
u3 signature data using its own secret key data and 

Iff said data processing apparatus verifies the 

en 

i"J 10 legitimacy of said signature data using public key data 

V 1 corresponding to said secret key data. 

123. A data providing system as set forth in claim 
lf 3 122 , wherein 

y~ said data providing apparatus distributes said 

15 module further storing public key certificate data 

certifying the legitimacy of said public key data to said 
data processing apparatus and 

said data processing apparatus verifies said 
signature data using the public key data stored in said 
20 distributed public key certificate data. 

124. A data providing system as set forth in claim 
122, wherein 

said management apparatus distributes public 
key certificate data certifying the legitimacy of said 
2 5 public key data to said data processing apparatus . and 
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said data processing apparatus verifies said 
signature data using the public key data stored in said 
distributed public key certificate data. 

125. A data providing system as set forth in claim 
5 122 , wherein said data providing apparatus performs 

mutual certification with said data processing apparatus, 
encrypts said module using session key data obtained by 
M3 said mutual certification, and sends the encrypted module 

VI to said data processing apparatus. 

fy 10 126. A data providing system as set forth in claim 

V- 122, wherein said data providing apparatus produces a 

s 

lZ storage medium recording said module . 

Jr. 127. A data providing system as set forth in claim 

?~* 122, wherein said data processing apparatus determines at 

15 least one of a purchase form and a usage form of said 
content data based on said usage control policy data. 

128. A data providing system as set forth in claim 
122 , wherein said data processing apparatus outputs said 
encrypted content key data and said encrypted content 
20 data to a decryption device. 

12 9. A data providing system as set forth in claim 
129, wherein 

said data processing apparatus determines at 
least one of the purchase form and the usage form of the 
2 5 distributed content data based on the usage control 
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policy data and sends log data showing the log of at 
least one of the purchase form and usage form decided to 
said management apparatus , and 

said management apparatus performs profit 
distribution processing for distributing the profit 
obtained along with the purchase and usage of the content 
data in the data processing apparatus to the interested 
parties of the data providing apparatus based on the 
received log data . 

130. A data providing system as set forth in claim 
129, wherein said management apparatus performs said 
profit distribution processing in units of content data. 

131. A data providing system as set forth in claim 
12 9, wherein 

said data providing apparatus distributes a 
module storing a plurality of said content files and a 
plurality of key files corresponding to the plurality of 
content files to said data processing apparatus and 

said content files include directory structure 
data showing the relationship among the plurality of 
content files and the relationship with said key files . 

132 . A data providing system as set forth in claim 
109, wherein said data providing apparatus further 
comprises a memory circuit for storing said module. 

133. A data providing system as set forth in claim 



• 



534 



132, wherein said data providing apparatus manages said 
module based on a content identifier uniquely allocated 
to said content data. 

134 . A data providing system as set forth in claim 
5 133, wherein said management apparatus prepares said key 

file further storing said content identifier. 

135 . A data providing system as set forth in claim 

133, wherein said content identifier is determined 
uniquely in said content data stored by said data 

10 providing apparatus in said memory circuit. 

136. A data providing system as set forth in claim 
133, wherein said content identifier is determined 
uniquely globally . 

137 . A data providing system as set forth in claim 
15 133, wherein said data providing apparatus produces said 

content identifier . - 

138 . A data providing system as set forth in claim 
133, wherein said data providing apparatus further 
comprises a memory circuit for storing said module. 

20 139. A data providing system as set forth in claim 

133, wherein said data processing circuit comprises a 
module giving resistance to outside monitoring and 
tampering of the processing content, predetermined data 
stored in an internal memory, and data being processed. 

25 140. A data providing apparatus which is managed by 
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a management: apparatus and distributes content data to a 
data processing apparatus, 

receiving a key file storing encrypted content 
key data and encrypted usage control policy data 
5 indicating the handling of said content data from said 
management apparatus and 

distributing a module storing a content file 
storing the content data encrypted by using said content 
key data and said key file received from said management 
10 apparatus to said data processing apparatus. 

141 . A data processing apparatus managed by a 
management apparatus and utilizing content data, 

receiving a module containing a key file 
storing encrypted content key data and encrypted usage 
15 control policy data indicating the handling of said 

content data and a content file storing the content data 
encrypted by using said content key data, 

determining at least one between a purchase 
form and an usage form of said content data based on said 
20 usage control policy data, and 

transmitting a log data indicating the log of 
the determined at least one of the related purchase form 
and usage form to said management apparatus . 

142 . A data providing system for distributing 

25 content data from a data providing apparatus to a data 
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processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

said data providing apparatus distributes a 
module storing a content file containing the content data 
encrypted by using said content key data and the key file 
received from said management apparatus to said data 
processing apparatus by using a predetermined 
communication protocol in a format not depending upon the 
related communication protocol or recording the same on a 
storage medium , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed module and determines the 
handling of said content data based on the related 
decrypted usage control policy data. 

143. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 
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said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

said data providing apparatus individually 
distributes a content file storing the content data 
encrypted by using said content key data and said key 
file received from said management apparatus to said data 
processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

144 . A data providing system as set forth in claim 
143, wherein 

said data providing apparatus individually 
distributes a plurality of said content files and a 
plurality of key files corresponding to said plurality of 
content files to said data processing apparatus, and 

said content files and said key files include 
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hyper link information showing the mutual correspondence . 

145. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data and distributes the related prepared key 
file to said data processing apparatus , 

said data providing apparatus distributes a 
content file storing the content data encrypted by using 
said content key data to said data processing apparatus 
by using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

146. A data providing system as set forth in claim 
145, wherein 
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said data providing apparatus distributes a 
plurality of said content files to said data processing 
apparatus , 

said management apparatus distributes the 
5 plurality of key files corresponding to the plurality of 
content files to said data processing apparatus, and 

said content files and said key files include 
rf hyper link information showing the mutual correspondence. 

f2 147. A data providing system for distributing 

s|= 10 content data from a data providing apparatus to a data 

m processing apparatus and managing said data providing 

|^ apparatus and said data processing apparatus by a 

O management apparatus , wherein 

£3 said management apparatus prepares a key file 

15 storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

said data providing apparatus distributes a 
module storing the content data encrypted by using said 
20 content key data and said key file received from said 

management apparatus to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or recording the same on a storage medium, and 
2 5 said data processing apparatus decrypts said 
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content key data and said usage control policy data 
stored in said distributed module and determines the 
handling of said content data based on the related 
decrypted usage control policy data. 

148. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data , 

said data providing apparatus individually 
distributes the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said distributed content data based on the 
related decrypted usage control policy data. 
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149. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
5 management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data and distributes the related prepared key 

ST* 

fy 10 file to said data processing apparatus, 



said data providing apparatus distributes the 
content data encrypted by using said content key data to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upoi 

15 the related communication protocol or recording the same 
on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 

2 0 handling of said distributed content data based on the 
related decrypted usage control policy data. 

150. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 

25 apparatus and said data processing apparatus by a 
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management: apparatus , wherein 

said management apparatus prepares encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data, 
5 said data providing apparatus individually 

distributes the content data encrypted by using said 
content key data and said encrypted content key data and 
\0 said encrypted usage control policy data received from 

111 said management apparatus to said data processing 

fy io apparatus by using a predetermined communication protocol 

W= but in a format not depending upon the related 

^ communication protocol or recording the same on a storage 

If medium, and 

Jrf said data processing apparatus decrypts said 

15 distributed content key data and said usage control 

policy data and determines the handling of the content 
data stored in said distributed content file based on the 
related decrypted usage control policy data. 

151. A data providing system for distributing 
20 content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus , wherein 

said management apparatus prepares encrypted 
2 5 content key data and encrypted usage control policy data 
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indicating the handling of said content data and 
distributes the same to said data processing apparatus, 

said data providing apparatus distributes the 
content data encrypted by using said content key data to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

said data processing apparatus decrypts said 
distributed content key data and said usage control 
policy data and determines the handling of said 
distributed content data based on the related decrypted 
usage control policy data. 

152 . A data providing system comprising a data 
providing apparatus, a data distribution apparatus, and a 
data processing apparatus, wherein 

said data providing apparatus provides a first 
module storing content data encrypted by using content 
key data, said encrypted content key data, and encrypted 
usage control policy data indicating the handling of said 
content data to said data distribution apparatus, 

said data distribution apparatus distributes a 
second module storing said encrypted content data, 
content key data, and the usage control policy data 
stored in said provided first module to said data 
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processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 
5 said data processing apparatus decrypts said 

content key data and said usage control policy data 
stored in said distributed second module and determines 

O 

?g the handling of said content data based on the related 

iff decrypted usage control policy data . 

S..3 I 

III 10 153. A data providing system as set forth in claim 

tn 152, wherein said data distribution apparatus prepares a 

M= second module including said provided first module and 

Q distributes the prepared second module to said data 

M processing apparatus . 

15 154. A data providing system as set forth in claim 

152, wherein said data distribution apparatus distributes 
said second module further storing price data showing the 
price of the content data to said data processing 
apparatus . 

20 155. A data providing system as set forth in claim 

154, wherein said data distribution apparatus determines 
the price data based on a wholesale price determined for 
said content data by said data providing apparatus . 

156. A data providing system as set forth in claim 

2 5 152, wherein said data providing apparatus provides a 



first module further storing signature data for verifying 
the legitimacy of a producer and transmitter of at least 
one data of the content data, content key data, and usage 
control policy data to said data distribution apparatus . 

157 . A data providing system as set forth in claim 
156, wherein said data providing apparatus provides a 
first module further storing at least one data among data 
for verifying if the data has been tampered with for at 
least one data of the content data, content key data, and 
usage control policy data and signature data for 
verifying if the data has been certified as legitimate by 
a predetermined manager to said data distribution device. 

158 . A data providing system as set forth in claim 
156, wherein said data distribution apparatus provides 
said second module further storing signature data for 
verifying the legitimacy of a producer and transmitter of 
at least one data among the content data, content key 
data, and usage control policy data to said data 
processing apparatus . 

159. A data providing system as set forth in claim 
152, wherein 

said data distribution apparatus provides said 
second module further storing at least one data among 
data for verifying if the data has been tampered with for 
at least one data of the content data, content key data, 
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and usage control policy data and signature data for 
verifying if the data has been certified as legitimate by 
a predetermined manager to said data processing 
apparatus . 

5 160. A data providing system as set forth in claim 

152, wherein 

said said data processing apparatus determines 
at least one of the purchase form and the usage form of 
the distributed content data based on the usage control 
10 policy data and sends log data showing the log of at 

least one of the purchase form and usage form decided to 
said management apparatus and 
y said management apparatus performs profit 

W distribution processing for distributing the profit 

15 obtained along with the purchase and usage of the content 
data in the data processing apparatus to the interested 
parties of the data providing apparatus and data 
distribution apparatus based on the received log data. 
^- 161. A data providing system as set forth in claim 

20 152, wherein 

said data processing apparatus sends 
distribution use log data relating to the distribution of 
the data distribution apparatus to said data distribution 
apparatus and 

2 5 said data distribution apparatus performs 
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charge processing relating to that distribution based on 
the distribution use log data. 

162 . A data providing system for providing content 
data from a data providing apparatus to a data 
5 distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
10 wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data , 

15 said data providing apparatus provides a first 

module storing a content file storing the content data 
encrypted by using said content key data and said key 
file received from said management apparatus to said data 
distribution apparatus , 

20 said data distribution apparatus distributes a 

second module storing said provided content file and said 
key file to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or 

2 5 recording the same on a storage medium, and 
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said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed second module and determines 
the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data . 

163. A data providing system as set forth in claim 
162, wherein said management apparatus produces signature 
data for verifying the legitimacy of the producer of said 
key file and prepares said key file further storing the 
related signature data. 

164. A data providing system as set forth in claim 
162, wherein 

said data ^providing "pjpct tu s r o du c e s said, 
content key data and said usage control policy data and 
transmits the same to said management apparatus , and 

said management apparatus prepares said key 
file based on said received content key data and usage 
control policy data and registers the received content 
key data and usage control policy data: 

165. A data providing system as set forth in claim 
162, wherein said data providing apparatus produces 
signature data for verifying at least one of the 
legitimacy of a producer and provider of said content 
file and a provider of said key file and distributes said 
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module further storing said signature data to said data 
processing apparatus . 

166. A data providing system as set forth in claim 
162, wherein said data distribution apparatus produces 
signature data for verifying at least one of the 
legitimacy of a producer and distributor of said content 
file and a distributor of said key file and distributes 
said second module further storing said signature data to 
said data processing apparatus . 

167. A data providing system as set forth in claim 
166, wherein said data processing apparatus verifies the 
signature data stored in said second module to confirm at 
least one of the legitimacy of a producer and distributor 
of said content file and a producer and distributor of 
said key file . 

168. A data providing system as set forth in claim 
162, wherein said data providing apparatus further stores 
in said content file expansion use software for expanding 
the content data when the content data is compressed. 

169. A data providing system as set forth in claim 
162, wherein said data providing apparatus stores 
metadata relating to the explanation of the content of 
the content data in said content file or distributes it 
separately from the content file to said data processing 
apparatus . 
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170. A data providing system as set forth in claim 
162, wherein said data providing apparatus further stores 
in said content file an electronic watermark information 
module including information used for detecting said 
electronic watermark information when electronic 
watermark information is buried in said content file. 

171. A data providing system as set forth in claim 
162, wherein said management apparatus 

produces said key file storing said content 
file data and said usage control policy data encrypted 
using said distribution use key data and 

distributes said distribution use key data to 
said data processing apparatus. 

172 . A data providing system as set forth in claim 
171, wherein said management apparatus and said data 
processing apparatus comprise a plurality of distribution 
use key data of defined periods of validity and use 
distribution use key data of corresponding periods. 

173 . A data providing system as set forth in claim 
162, wherein said management apparatus produces said key 
file further storing data describing the grammar of said 
usage policy control data . 

174 . A data providing system as set forth in claim 
162, wherein 

said management apparatus distributes data 



showing information for reading the content file and the 
key file, that is, a file reader, to said data processing 
apparatus and 

said data processing apparatus reads said 
content file and said key file based on the file reader. 

175. A data providing system as set forth in claim 
162 , wherein 

said data providing apparatus distributes data 
showing information for reading the content file and the 
key file, that is, a file reader, to said data processing 
apparatus and 

said data processing apparatus reads said 
content file and said key file based on the file reader. 

176. A data providing system as set forth in ulcilui 
165, wherein 

said data providing apparatus produces said 
signature data using its own secret key data and 

said data processing apparatus verifies the 
legitimacy of said signature data using public key data 
corresponding to said secret key data. 

177 . A data providing system as set forth in claim 
176, wherein 

said data providing apparatus distributes said 
module further storing public key certificate data 
certifying the legitimacy of said public key data to said 
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data processing apparatus and 

said data processing apparatus verifies said 
signature data using the public key data stored in said 
distributed public key certificate data. 

178. A data providing system as set forth in claim 
176 , wherein 

said management apparatus distributes public 
key certificate data certifying the legitimacy of said 
public key data to said data processing apparatus and 

said data processing apparatus verifies said 
signature data using the public key data stored in said 
distributed public key certificate data. 

179. A data providing system as set forth in claim 
176, wherein 

said data distribution apparatus produces said 
signature data using its own secret key data and 

said data processing apparatus verifies the 
legitimacy of said signature data using public key data 
corresponding to said secret key data. 

180. A data providing system as set forth in claim 
17 9, wherein 

said data distribution apparatus distributes 
said module further storing public key certificate data 
certifying the legitimacy of said public key data to said 
data processing apparatus and 
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said data processing apparatus verifies the 
legitimacy of said signature data using public key data 
stored in said distributed public key certificate data. 

181. A data providing system as set forth in claim 
179, wherein 

said management apparatus distributes public 
key certificate data certifying the legitimacy of said 
public key data to said data processing apparatus and 

said data processing apparatus verifies the 
legitimacy of said signature data using public key data 
stored in said distributed public key certificate data. 

182 . A data providing system as set forth in claim 
162, wherein said data distribution apparatus performs 
mutual certification with said data processing apparatus, 
encrypts said module using session key data obtained by 
said mutual certification, and sends the encrypted second 
module to said data processing apparatus . 

183. A data providing system as set forth in claim 
182, wherein said data distribution apparatus produces a 
storage medium recording said module. 

184 . A data providing system as set forth in claim 
162, wherein said data processing apparatus determines at 
least one of a purchase form and a usage form of said 
content data based on said usage control policy data . 

185. A data providing system as set forth in claim 



162, wherein said data processing apparatus outputs said 
encrypted content key data and said encrypted content 
data to a decryption device . 

186. A data providing system as set forth in claim 
162 , wherein 

said data processing apparatus determines at 
least one of the purchase form and the usage form of the 
distributed content data based on the usage control 
policy data and sends log data showing the log of at 
least one of the purchase form and usage form decided to 
said management apparatus , and 

said management apparatus performs profit 
distribution processing for distributing the profit 
obtained along with the purchase and usage of the content 
data in the data processing apparatus to the interested 
parties of the data providing apparatus and data 
distribution apparatus based on the received log data. 

187 . A data providing system as set forth in claim 
186, wherein said management apparatus performs said 
profit distribution processing in units of content data. 

188 . A data providing system as set forth in claim 
162, wherein said data distribution apparatus distributes 
said second module storing price data showing a price of 
said content data to said data processing apparatus . 

189. A data providing system as set forth in claim 



186, wherein said management: apparatus registers said 
price data received from said data distribution 
apparatus . 

190. A data providing system as set forth in claim 
162, wherein said data processing apparatus comprises a 
module giving resistance to outside monitoring and 
tampering of the processing content, predetermined data 
stored in an internal memory, and data being processed. 

191. A data providing system as set forth in claim 
162, wherein 

when said first module and said second module 
store a plurality of content files and a plurality of key 
files corresponding to the plurality of content files, 

said first module and said second module 
further include data showing the correspondence of the 
plurality of content files and the corresponding key 
files. 

192 . A data providing system as set forth in claim 
162 , wherein 

said data providing apparatus distributes a 
module storing a plurality of said content files and a 
plurality of key files corresponding to the plurality of 
content files to said data processing apparatus and 

said content files include directory structure 
data showing the relationship among the plurality of 
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content files and the relationship with said key files . 

193. A data providing system as set forth in claim 
162, wherein said data providing apparatus further 
comprises a memory circuit for storing said module. 

194 . A data providing system as set forth in claim 

193, wherein said data providing apparatus manages said 
module based on a content identifier uniquely allocated 
to said content data. 

195. A data providing system as set forth in claim 

194, wherein said management apparatus prepares said key 
file further storing said content identifier. 

196. A data providing system as set forth in claim 
194 f wherein said content identifier is determined 
uniquely in said content data stored by said data 
providing apparatus in said memory circuit. 

197. A data providing system as set forth in claim 
194, wherein said content identifier is determined 
uniquely globally. 

198. A data providing system as set forth in claim 
194, wherein said data providing apparatus produces said 
content identifier . 

199. A data providing system as set forth in claim 
194, wherein said data providing apparatus further 
comprises a memory circuit for storing said module. 

200 . A data providing system for providing content 
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data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

said data providing apparatus provides a first 
module storing a content file containing the content data 
encrypted by using said content key data and a key file 
received from said management apparatus to said data 
distribution apparatus, 

said data distribution apparatus distributes a 
second module storing said provided content file to said 
data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed second module and determines 
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the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data . 

201. A data providing system for providing content 
data from a data providing apparatus to a first data 
distribution apparatus and a second data distribution 
apparatus , distributing the content data from said first 
data distribution apparatus and said second data 
distribution apparatus to a data processing apparatus , 
and managing said data providing apparatus, said first 
data distribution apparatus r said second data 
distribution apparatus, and said data processing 
apparatus by a management apparatus , wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data , 

said data providing apparatus provides a first 
module storing a content file storing the content data 
encrypted by using said content key data and said key 
file received from said management apparatus to said 
first data distribution apparatus and said second data 
distribution apparatus , 

said first data distribution apparatus 
distributes a second module storing said provided content 




- 559 - 

file and said key file to said data processing apparatus, 

said second data distribution apparatus 
distributes a third module storing said provided content 
file and said key file to said data processing apparatus, 
5 and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed second module and said third 
module and determines the handling of said content data 
10 based on the related decrypted usage control policy data. 

202. A data providing system as set forth in claim 
201, wherein 

said first data distribution apparatus 
distributes said second module storing first price data 
15 showing a price of said content data to said data 
processing apparatus and 

said second data distribution apparatus 
distributes said third module storing second price data 
showing a price of content data to said data processing 
20 apparatus. 

203. A data providing system for providing first 
content data from a first data providing apparatus to a 
data distribution apparatus, providing second content 
data from a second data providing apparatus to the data 

25 distribution apparatus, distributing the content data 



from said data distribution apparatus to a data 
processing apparatus , and managing said first data 
providing apparatus, said second data providing 
apparatus, said data distribution apparatus , and said 
data processing apparatus by a management apparatus , 
wherein 

said management apparatus prepares a first key 
file storing an encrypted first content key data and an 
encrypted first usage control policy data indicating the 
handling of said first content data and a second key file 
storing an encrypted second content key data and an 
encrypted second usage control policy data indicating the 
handling of said second content data, 

said first data providing apparatus provides a 
first module storing a first content file storing said 
first content data encrypted by using said first content 
key data and said first key file received from said 
management apparatus to said data distribution apparatus , 

said second data providing apparatus provides a 
second module storing a second content file storing said 
second content data encrypted by using said second 
content key data and said second key file received from 
said management apparatus to said data distribution 
apparatus , 

said data distribution apparatus distributes a 



third module storing said provided first content file, 
said first key file, said second content file, and said 
second key file to said data processing apparatus, and 
said data processing apparatus decrypts said 
first content key data, said second content key data, 
said first usage control policy data, and said second 
usage control policy data stored in said distributed 
third module, determines the handling of said first 
content data based on the related decrypted first usage 
control policy data, and determines the handling of said 
second content data based on the related decrypted second 
usage control policy data. 

204. A data providing system as set forth in claim 
203, wherein said data distribution apparatus distributes 
said third module further storing first price data 
showing a price of said first content data and second 
price data showing a price of said second content data to 
said data processing apparatus . 

205. A data providing system for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 



wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

said data providing apparatus individually 
distributes a content file storing the content data 
encrypted by using said content key data and said key 
file received from said management apparatus to said data 
distribution apparatus , 

said data distribution apparatus individually 
distributes said distributed content file and said key 
file to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or by 
recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

206. A data providing system as set forth in claim 
205, wherein said content file and said key file include 
data for clearing indicating their mutual correspondence . 
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207 . A data providing system for providing content 
data from a data providing apparatus to a data processing 
apparatus and managing said data providing apparatus and 
said data processing apparatus by a management apparatus , 
wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data and distributes the related prepared key 
file to said data processing apparatus, 

said data providing apparatus distributes a 
content file storing the content data encrypted by using 
said content key data to said data distribution 
apparatus , 

said data distribution apparatus distributes 
said provided content file to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or by recording the same on a 
storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 



policy data. 

208 . A data providing system as set forth in claim 
201 , wherein said content file and said key file include 
data for clearing indicating their mutual correspondence . 

209. A data providing system for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data , 

said data providing apparatus provides a first 
module storing the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data distribution apparatus, 

said data distribution apparatus distributes a 
second module storing said provided content data and said 
key file to said data processing apparatus by using a 
predetermined communication protocol but in a format not 



depending upon the related communication protocol or by 
recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed second module and determines 
the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data . 

210. A data providing system for providing content 
data from a data providing apparatus to a data 
distribution apparatus , distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data, 

said data providing apparatus individually 
distributes the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data distribution apparatus, 

said data distribution apparatus individually 
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distributes said distributed content data and said key 
file to said data distribution apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or by 
recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 



01 handling of said distributed content data based on the 



SI 10 related decrypted usage control policy data. 

211. A data providing system for providing content 
data from a data providing apparatus to a data processing 
apparatus, and managing said data providing apparatus and 
said data processing apparatus by a management apparatus, 
15 wherein 

said management apparatus prepares a key file 
storing encrypted content key data and encrypted usage 
control policy data indicating the handling of said 
content data and distributes the related prepared key 
20 file to said data processing apparatus, 

said data providing apparatus distributes the 
content data encrypted by using said content key data to 
said data distribution apparatus, 

said data distribution apparatus distributes 
2 5 said provided content data to said data processing 
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apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or by recording the same on a 
storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said distributed content data based on the 
related decrypted usage control policy data. 

212 . A data providing system for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus , and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
wherein 

said management apparatus provides, encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data to said data 
providing apparatus , 

said data providing apparatus individually 
distributes the content data encrypted by using said 
content key data and said encrypted content key data and 
said encrypted usage control policy data received from 
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said management apparatus to said data distribution 
apparatus , 

said data distribution apparatus distributes 
said distributed content data, said encrypted content key 
data, and said encrypted usage control policy data to 
said data distribution apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

said data processing apparatus decrypts said 
distributed content key data and said usage control 
policy data and determines the handling of said 
distributed content data based on the related decrypted 
usage control policy data . 

213. A data providing system for providing content 
data from a data providing apparatus to a data 
distribution apparatus , distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus , 
wherein 

said management apparatus provides encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data to said data 



processing apparatus , 

said data providing apparatus provides the 
content data encrypted by using said content key data to 
said data distribution apparatus, 

said data distribution apparatus distributes 
said distributed provided content data to said data 
processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

said data processing apparatus decrypts said 
distributed content key data and said usage control 
policy data and determines the handling of said 
distributed content data based on the related decrypted 
usage control policy data . 

214. A data providing system comprising a data 
providing apparatus, a data distribution apparatus, a 
management apparatus, and a data processing apparatus, 
wherein 

said data providing apparatus provides master 
source data of content to said management apparatus , 

said management apparatus manages said data 
providing apparatus , said data distribution apparatus , 
and said data processing apparatus, encrypts said 
provided master source data by using content key data to 



prepare content data, prepares a content file storing the 
related content data, prepares a key file storing said 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data, 
and provides said content file and said key file to said 
data distribution apparatus, 

said data distribution apparatus distributes 
said provided content file and said key file to said data 
processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

215. A data providing system as set forth in claim 
214, wherein 

said management apparatus produces a first 
module storing said content file and said key file and 
provides the first module to said data distribution 
apparatus and 

said data distribution apparatus produces a 



second file storing said content file and said key file 
stored in said first module and distributes the second 
module to said data providing apparatus . 

216. A data providing system as set forth in claim 
214, wherein said management apparatus 

comprises at least one database among a 
database for storing and managing said content file, a 
database for storing and managing said key file, and a 
database for storing and managing said usage control 
policy data and 

centrally manages at least one among said 
content file, said key file, and said usage control 
policy data by using a content identifier uniquely 
allocated to said content data. 

217. A data providing system as set forth in claim 
214, wherein said data providing apparatus provides said 
content key data and said usage control policy data to 
said management apparatus . 

218. A data providing system comprising a data 
providing apparatus, a data distribution apparatus, a 
management apparatus, and a data processing apparatus, 
wherein 

said data providing apparatus provides master 
source data of content to said management apparatus , 

said management apparatus manages said data 



providing apparatus, said data distribution apparatus, 
and said data processing apparatus, encrypts said 
provided master source data by using content key data to 
prepare content data, prepares a content file storing the 
related content data, prepares a key file storing said 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data, 
and provides said content file to said data distribution 
apparatus and provides said key file to said data 
processing apparatus , 

said data distribution apparatus distributes 
said provided content file to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or recording the same on a storage 
medium > and . 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

219. A data providing system comprising a data 
providing apparatus , a data distribution apparatus , a 
management apparatus, and a data processing apparatus, 



wherein 

said data providing apparatus provides a 
content file storing encrypted content data using content 
key data to said management apparatus , 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
and said data processing apparatus, prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, and provides said content file provided 
from said data providing apparatus and said prepared key 
file to said data distribution apparatus, 

said data distribution apparatus distributes 
said provided content file and said key file to said data 
processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

220. A data providing system as set forth in claim 
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219 , wherein 

said management: apparatus produces a first 
module storing said content file and said key file and 
provides the first module to said data distribution 
apparatus and 

said data distribution apparatus produces a 
second file storing said content file and said key file 
stored in said first module and distributes the second 
module to said data providing apparatus . 

221. A data providing system as set forth in claim 
219, wherein said management apparatus 

comprises at least one database among a 
database for storing and managing said content file, a 
database for storing and managing said key file, and a 
database for storing and managing said usage control 
policy data and 

centrally manages at least one among said 
content file, said key file, and said usage control 
policy data by using a content identifier uniquely 
allocated to said content data. 

222 . A data providing system as set forth in claim 
219, wherein said data providing apparatus provides said 
content key data and said usage control policy data to 
said management apparatus . 

223. A data providing system comprising a data 



providing apparatus , a data distribution apparatus , a 
management apparatus, and a data processing apparatus , 
wherein 

said data providing apparatus provides a 
content file storing encrypted content data using content 
key data to said management apparatus , 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
and said data processing apparatus, prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, provides said content file provided from 
said data providing apparatus to said data distribution 
apparatus, and provides said prepared key file to said 
data processing apparatus , 

said data distribution apparatus distributes 
said provided content file to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or by recording the same on a 
storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of the content data stored in said distributed 
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content file based on the related decrypted usage control 
policy data. 

224. A data providing system comprising a data 
providing apparatus , a data distribution apparatus, a 
management apparatus, a database device, and a data 
processing apparatus, wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file and a key file provided 
from said management apparatus in said database device, 

said management apparatus prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data providing apparatus , 

said data distribution apparatus distributes 
said content file and key file obtained from said 
database device to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 



handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

225. A data providing system as set forth in claim 
224, wherein said database device centrally manages said 
stored content file and key file using a content 
identifier uniquely allocated to said content data . 

226. A data providing system as set forth in claim 
224, wherein said management apparatus 

comprises at least one database among a 
database for storing and managing said key file and a 
database for storing and managing said usage control 
policy data and 

centrally manages at least one among said key 
file and said usage control policy data by using a 
content identifier uniquely allocated to said content 
data . 

227 . A data providing system as set forth in claim 
224, wherein said data providing apparatus provides said 
content key data and said usage control policy data to 
said management apparatus . 

228. A data providing system comprising a data 
providing apparatus, a data distribution apparatus, a 
management apparatus, a database device, and a data 
processing apparatus, wherein 
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said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file in said database 
device , 

said management apparatus prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data providing apparatus , 

said data distribution apparatus distributes 
said content file obtained from said database device and 
the key file provided from said data distribution 
apparatus to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or 
recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

229. A data providing system comprising a data 
providing apparatus, a data distribution apparatus, a 
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management: apparatus , a database device, and a data 
processing apparatus, wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file in said database 
device , 

said management apparatus prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data processing apparatus, 

said data distribution apparatus distributes 
said content file obtained from said database device to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

230. A data providing system comprising a plurality 
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of data providing apparatuses, a data distribution 
apparatus, a plurality of management apparatuses, a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses encrypt content 
data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files and key files provided 
from corresponding management apparatuses in said 
database device, 

said management apparatuses prepare key files 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses and provide the 
related prepared key files to corresponding data 
providing apparatuses , 

said data distribution apparatus distributes 
said content files and key files obtained from said 
database device to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
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handling of said content data stored in said distributed 
content files based on the related decrypted usage 
control policy data. 

231. A data providing system as set forth in claim 
230, wherein said database device centrally manages said 
stored content files and key files using content 
identifiers uniquely allocated to said content data. 

232 . A data providing system as set forth in claim 
230, wherein said management apparatuses 

comprise at least one database among a database 
for storing and managing said key files and a database 
for storing and managing said usage control policy data 
and 

centrally manage at least one among said key 
files and said usage control policy data by using content 
identifiers uniquely allocated to said content data 
provided by said data providing apparatuses in said 
corresponding data providing apparatuses . 

233. A data providing system as set forth in claim 
230, wherein said data providing apparatuses provide said 
content key data and said usage control policy data to 
said management apparatuses . 

234 . A data providing system comprising a plurality 
of data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
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database device, and a data processing apparatus, wherein 
said data providing apparatuses encrypt content 
data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files in said database device, 
said management apparatuses prepare key files 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses and provide the 
related prepared key files to said data distribution 
apparatus , 

said data distribution apparatus distributes 
said content files obtained from said database device and 
the key files provided from said management apparatuses 
to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or 
recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of said content data stored in said distributed 
content files based on the related decrypted usage 
control policy data . 
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235. A data providing system comprising a plurality 
of data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses encrypt content 
data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files in said database device, 

said management apparatuses prepare key files 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses and provide the 
related prepared key files to said data processing 
apparatus , 

said data distribution apparatus distributes 
said content files obtained from said database device to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key files and determines the 
handling of said content data stored in said distributed 
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content files based on the related decrypted usage 
control policy data. 

236. A data providing system comprising a plurality 
of data providing apparatuses , a data distribution 
apparatus, a plurality of management apparatuses, a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files and key files 
received from the related management apparatuses in said 
database , 

said management apparatuses encrypt said master 
sources received from corresponding data providing 
apparatuses by using content key data, prepare content 
files storing the related encrypted content data, prepare 
key files storing said encrypted content key data and 
encrypted usage control policy data indicating the 
handling of said content data for the content data 
provided by corresponding data providing apparatuses , and 
send said prepared content files and said prepared key 
files to corresponding data providing apparatuses , 

said data distribution apparatus distributes 
said content files and key files obtained from said 
database device to said data processing apparatus by 
using a predetermined communication protocol but in a 
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format not depending upon the related communication 
protocol or by recording the same on a storage medium, 
and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of said content data stored in said distributed 
content files based on the related decrypted usage 
control policy data . 

237 . A data providing system as set forth in claim 
236, wherein said database device centrally manages said 
stored content files and key files using content 
identifiers uniquely allocated to said content data. 

238. A data providing system as set forth in claim 
236, wherein said management apparatuses 

comprise at least one database among a database 
for storing and managing said key files and a database 
for storing and managing said usage control policy data 
and 

centrally manage at least one among said key 
files and said usage control policy data by using content 
identifiers uniquely allocated to said content data 
provided by said data providing apparatuses in said 
corresponding data providing apparatuses . 

239. A data providing system as set forth in claim 
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236, wherein said data providing apparatuses provide said 
content key data and said usage control policy data to 
said management apparatuses . 

240. A data providing system comprising a plurality 
of data providing apparatuses, a data distribution 
apparatus, a plurality of management apparatuses, a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files received from the 
related management apparatuses in said database, 

said management apparatuses encrypt said master 
sources received from corresponding data providing 
apparatuses by using content key data, prepare content 
files storing the related encrypted content data, send 
the related prepared content files to said data providing 
apparatuses , prepare key files storing said encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data for the 
content data provided by corresponding data providing 
apparatuses , and send the related prepared key files 
provided from said management apparatuses to 
corresponding data distribution apparatus, 

said data distribution apparatus distributes 
said content files obtained from said database device and 
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key files provided from said management: apparatuses to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of said content data stored in said distributed 
content files based on the related decrypted usage 
control policy data. 

241. A data providing system comprising a plurality 
of data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files received from the 
related management apparatuses in said database, 

said management apparatuses encrypt said master 
sources received from corresponding data providing 
apparatuses by using content key data, prepare content 
files storing the related encrypted content data, send 
the related prepared content files to said data providing 
apparatuses, prepare key files storing said encrypted 
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content key data and encrypted usage control policy data 
indicating the handling of said content data for the 
content data provided by corresponding data providing 
apparatuses r and send the related prepared key files to 
said data processing apparatus, 

said data distribution apparatus distributes 
said content files obtained from said database device to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of said content data stored in said provided 
content files based on the related decrypted usage 
control policy data . 

242 . A data providing system comprising a data 
providing apparatus, a data distribution apparatus, and a 
data processing apparatus, wherein 

said data providing apparatus provides a first 
module storing content data encrypted by using content 
key data, said encrypted content key data, and encrypted 
usage control policy data indicating the handling of said 
content data to said data distribution apparatus, 
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performs charge processing in units of the content data 
based on log data received from said data processing 
apparatus, and performs a profit distribution processing 
for distributing the profit paid by interested parties of 
said data processing apparatus to interested parties of 
the related data providing apparatus and interested 
parties of said data distribution apparatus, 

said data distribution apparatus distributes a 
second module storing said encrypted content data, 
content key data, and usage control policy data stored in 
said provided first module to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not, depending upon the related 
communication protocol or by recording the same on a 
storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed module, determines the 
handling of said content data based on the related 
decrypted usage control policy data, prepares the log 
data for the handling of the related content data, and 
sends the related log data to said data providing 
apparatus . 

243 . A data providing system as set forth in claim 
242, wherein 
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said data processing apparatus sends data 
distribution use apparatus use log data relating to the 
distribution service of the content data performed by the 
data distribution apparatus to said data distribution 
5 apparatus and 

said data distribution apparatus performs 
charge processing based on that data distribution 
Q apparatus use log data . 

83 244. A data providing system comprising a data 

01 io providing apparatus , a data distribution apparatus , and a 
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management apparatus , wherein 

said data providing apparatus provides content 

data , 

said data distribution apparatus distributes 
15 said content file provided from said data providing 
apparatus or a content file in accordance with the 
content data provided by said data providing apparatus 
provided from said management apparatus to said data 
processing apparatus , and 
20 said data processing apparatus decrypts the 

usage control policy data stored in a key file received 
from said data distribution apparatus or said management 
apparatus , determines the handling of said content data 
stored in the content file received from said data 
2 5 distribution apparatus or said management apparatus based 



on the related decrypted usage control policy data, and 
further distributes said content file and key file 
received from said data distribution apparatus or said 
management apparatus to the other data processing 
apparatus . 

245. A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus, comprising the steps of. 

distributing a module storing the content data 
encrypted by using content key data, said encrypted 
content key data, and encrypted usage control policy data 
indicating the handling of said content data from said 
data providing apparatus to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or recording the same on a storage 
medium , and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed module and determining the 
handling of said content data based on the related 
decrypted usage control policy data. 

246. A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 



apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus, preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data , 

distributing said prepared key file from said 
management apparatus to said data providing apparatus , 
and 

distributing a module storing a content file 
storing the content data encrypted by using said content 
key data and said key file distributed from said 
management apparatus from said data providing apparatus 
to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or 
recording the same on a storage medium, and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed module and determining the 
handling of said content data based on the related 
decrypted usage control policy data. 

247. A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
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apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data , 

in said data providing apparatus, distributing 
a module storing a content file containing the content 
data encrypted by using said content key data and a key 
file received from said management apparatus to said data 
processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed module and determining the 
handling of said content data based on the related 
decrypted usage control policy data . 

248. A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing a key 



file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data , 

distributing the related prepared key file from 
said management apparatus to said data providing 
apparatus , and 

individually distributing a content file 
storing the content data encrypted by using said content 
key data and said key file distributed from said 
management apparatus from said data providing apparatus 
to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or 
recording the same on a storage medium, and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

249. A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 



in said management apparatus, preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data , 

distributing the related prepared key file from 
said management apparatus to said data processing 
apparatus , and 

distributing a content file storing the content 
data encrypted by using said content key data from said 
data providing apparatus to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or recording the same on a storage 
medium , and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

250 . A data providing method for distributing . 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 



in said management: apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

in said data providing apparatus, distributing 
a module storing the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or recording the same on a storage medium, and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed module and determining the 
handling of said content data based on the related 
decrypted usage control policy data. 

251 . A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 



In said data providing apparatus , individually 
distributing the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or recording the same on a storage medium, and 

in said data processing apparatus , decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of said distributed content data based on the 
related decrypted usage control policy data . 

252 . A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and distributing the related prepared key 
file to said data processing apparatus, in said data 
providing apparatus , 

distributing the content data encrypted by 
using said content key data to said data processing 
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apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or recording the same on a storage 
medium , and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of said distributed content data based on the 
related decrypted usage control policy data. 

253. A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data, 

in said data providing apparatus , individually 
distributing the content data encrypted by using said 
content key data and said encrypted content key data and 
said encrypted usage control policy data received from 
said management apparatus to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or recording the same on a storage 



medium , and 

in said data processing apparatus, decrypting 
said distributed content key data and said usage control 
policy data and determining the handling of the content 
data stored in said distributed content file based on the 
related decrypted usage control policy data . 

254 . A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus , preparing 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data 
and distributing the same to said data processing 
apparatus , 

in said data providing apparatus, distributing 
the content data encrypted by using said content key data 
to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or 
recording the same on a storage medium, and 

in said data processing apparatus, decrypting 
said distributed content key data and said usage control 
policy data and determining the handling of said 



distributed content data based on the related decrypted 
usage control policy data. 

255, A data providing method using a data providing 
apparatus, a data distribution apparatus, and a data 
processing apparatus, comprising the steps of 

providing a first module storing content data 
encrypted by using content key data, encrypted said 
content key data, and encrypted usage control policy data 
indicating the handling of said content data from said 
data providing apparatus to said data distribution 
apparatus , 

distributing a second module storing said 
encrypted content data, content key data, and the usage 
control policy data stored in said provided said first 
module from said data distribution apparatus to said data 
processing apparatus by using said content key data to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed second module and determining 
the handling of said content data based on the related 
decrypted usage control policy data. 
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256. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , prepasring a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

distributing the related prepared key file from 
said management apparatus to said data providing 
apparatus , 

providing a first module storing a content file 
storing the content data encrypted by using said content 
key data and said key file received from said management 
apparatus from said data providing apparatus to said data 
distribution apparatus, and 

distributing a second module storing said 
provided content file and said key file from said data 
distribution apparatus to said data processing apparatus 
by using a predetermined communication protocol but in a 
format not depending upon the related communication 



protocol or recording the same on a storage medium, and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed second module and determining 
the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data . 

257. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus and said data 
processing apparatus by a management apparatus , 
comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

in said data providing apparatus , providing a 
first module storing a content file containing the 
content data encrypted by using said content key data and 
a key file received from said management apparatus to 
said data distribution apparatus , 

in said data distribution apparatus, 



distributing a second module storing said provided 
content file to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or 
recording the same on a storage medium, and 

in said data processing apparatus , decrypting 
said content key data and said usage control policy data 
stored in said distributed second module and determining 
the handling of said content data stored in said 
distributed second module based on the related decrypted 
usage control policy data. 

258. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus , and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

distributing said prepared key file from said 
management apparatus to said data providing apparatus , 



individually providing a content file storing 
the content data encrypted by using said content key data 
and said key file received from said management apparatus 
from said data providing apparatus to said data 
distribution apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or recording the same 
on a storage medium, and 

individually distributing said distributed 
content file and said key file from said data 
distribution apparatus to said data distribution 
apparatus , and 

in said data processing apparatus f decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

259. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus, preparing a key 
file storing encrypted content key data and encrypted 
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usage control policy data indicating the handling of said 
content data , 

distributing the related prepared key file from 
said management apparatus to said data processing 
apparatus , 

providing a content file storing the content 
data encrypted by using said content key data from said 
data providing apparatus to said data distribution 
apparatus , 

distributing said provided content file from 
said data distribution apparatus to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or recording the same on a storage 
medium , and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

2 60. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus , distributing the content data 
from said data distribution apparatus to a data 



processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data , 

in said data providing apparatus , providing a 
first module storing the content data encrypted by using 
said content key data and said key file received from 
said management apparatus to said data distribution 
apparatus , 

in said data distribution apparatus , 
distributing a second module storing said provided 
content data and said key file to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or recording the same on a storage 
medium, and 

in said data processing apparatus , decrypting 
said content key data and said usage control policy data 
stored in said distributed second module and determining 
the handling of said content data stored in said 
distributed second module based on the related decrypted 



usage control policy data . 

261. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, 

in said data providing apparatus , individually 
providing the content data encrypted by using said 
content key data and said key file received from said 
management apparatus to said data distribution apparatus, 

in said data distribution apparatus, 
individually distributing said distributed content data 
and said key file to said data distribution apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or recording the same on a storage medium, and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
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stored in said distributed key file and determining the 
handling of said distributed content data based on the 
related decrypted usage control policy data. 

262. A data providing method for distributing 
content data from a data providing apparatus to a data 
processing apparatus and managing said data providing 
apparatus and said data processing apparatus by a 
management apparatus, comprising the steps of, 

in said management apparatus, preparing a key 
file storing encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and distributing the related prepared key 
file to said data processing apparatus, in said data 
providing apparatus , 

providing the content data encrypted by using 
said content key data to said data distribution 
apparatus , 

in said data distribution apparatus, 
distributing said provided content data to said data 
processing apparatus, and 

in said data processing apparatus, decrypting 
said content key data and said usage control policy data 
stored in said distributed key file and determining the 
handling of said distributed content data based on the 
related decrypted usage control policy data. 



2 63. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus, 
comprising the steps of, 

in said management apparatus , providing 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data 
to said data providing apparatus , 

in said data providing apparatus, individually 
distributing the content data encrypted by using said 
content key data and said encrypted content key data and 
said encrypted usage control policy data received from 
said management apparatus to said data distribution 
apparatus , 

in said data distribution apparatus, 
individually distributing said distributed content data, 
said encrypted content key, data, and said encrypted 
usage control policy data to said data distribution 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or recording the same on a storage 



medium , and 

in said data processing apparatus, decrypting 
said distributed content key data and said usage control 
policy data and determining the handling of said 
distributed content data based on the related decrypted 
usage control policy data. 

2 64. A data providing method for providing content 
data from a data providing apparatus to a data 
distribution apparatus, distributing the content data 
from said data distribution apparatus to a data 
processing apparatus, and managing said data providing 
apparatus, said data distribution apparatus, and said 
data processing apparatus by a management apparatus , 
comprising the steps of, 

in said management apparatus, distributing 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data 
to said data processing apparatus, 

in said data providing apparatus , providing the 
content data encrypted by using said content key data to 
said data distribution apparatus, 

in said data distribution apparatus, 
distributing said provided content data to said data 
processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 



the related communication protocol by recording the same 
on a storage medium, and 

in said data processing apparatus, decrypting 
said distributed content key data and said usage control 
policy data and determining the handling of said 
distributed content data based on the related decrypted 
usage control policy data. 

2 65. A data providing method using a data providing 
apparatus, a data distribution apparatus, a management 
apparatus, and a data processing apparatus, wherein 

said data providing apparatus provides master 
source data of content to said management apparatus , 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
and said data processing apparatus, encrypts said 
provided master source data by using content key data to 
prepare content data, prepares a content file storing the 
related content data, prepares a key file storing said 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data, 
and provides said content file and said key file to said 
data distribution apparatus, 

said data distribution apparatus distributes 
said provided content file and said key file to said data 
processing apparatus by using a predetermined 



communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

266. A data providing method using a data providing 
apparatus , a data distribution apparatus, a management 
apparatus, and a data processing apparatus, wherein 

said data providing apparatus provides master 
source data of content to said management apparatus , 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
and said data processing apparatus, encrypts said 
provided master source data by using content key data to 
prepare content data, prepares a content file storing the 
related content data, prepares a key file storing said 
encrypted content key data and encrypted usage control 
policy data indicating the handling of said content data, 
and provides said content file to said data distribution 
apparatus and provides said key file to said data 
processing apparatus , 



said data distribution apparatus distributes 
said provided content file to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or by recording the same on a 
storage medium , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

267. A data providing method using a data providing 
apparatus , a data distribution apparatus, a management 
apparatus , and a data processing apparatus, wherein 

said data providing apparatus provides a 
content file storing encrypted content data using content 
key data to said management apparatus , 

said management apparatus manages said data 
providing apparatus, said data distribution apparatus, 
and said data processing apparatus, prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data, and provides said content file provided 
from said data providing apparatus and said prepared key 
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file to said data distribution apparatus, 

said data distribution apparatus distributes 
said provided content file and said key file to said data 
processing apparatus by using a predetermined 
5 communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 
p rsaid data processing apparatus decrypts said 

in content key data and said usage control policy data 

m 

W. 10 stored in said distributed key file and determines the 

ru 

Sj handling of the content data stored in said distributed 

CP 

ss content file based on the related decrypted usage control 

t 

Q policy data. 

Ty 2 68. A data providing method using a data providing 

^ 15 apparatus, a data distribution apparatus, a management 

apparatus, and a data processing apparatus, wherein 

said data providing apparatus provides a 
content file storing encrypted content data using content 
key data to said management apparatus , 
20 said management apparatus manages said data 

providing apparatus, said data distribution apparatus, 
and said data processing apparatus, prepares a key file, 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
2 5 content data, provides said content file provided from 



said data providing apparatus to said data distribution 
apparatus and provides said prepared key file to said 
data processing apparatus, 

said data distribution apparatus distributes 
said provided content file to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or by recording the same on a 
storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of the content data stored in said distributed 
content file based on the related decrypted usage control 
policy data. 

269 , A data providing method using a data providing 
apparatus, a data distribution apparatus , a management 
apparatus, a database device, and a data processing 
apparatus , wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file and a key file provided 
from said management apparatus in said database device, 

said management apparatus prepares a key file 



storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data providing apparatus , 

said data distribution apparatus distributes 
said content file and key file obtained from said 
database device to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or by recording the same on a storage medium, 
and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

270. A data providing method using a data providing 
apparatus , a data distribution apparatus, a management 
apparatus, a database device, and a data processing 
apparatus , wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
storing the related encrypted content data, and stores 
the related prepared content file in said database 



device, 

said management apparatus prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data distribution apparatus, 

said data distribution apparatus distributes 
said content file obtained from said database device and 
the key file provided from said data distribution 
apparatus to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or by 
recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

271. A data providing method using a data providing 
apparatus, a data distribution apparatus, a management 
apparatus, a database device, and a data processing 
apparatus , wherein 

said data providing apparatus encrypts content 
data by using content key data, prepares a content file 
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storing the related encrypted content data, and stores 
the related prepared content file in said database 
device , 

said management apparatus prepares a key file 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data and provides the related prepared key file 
to said data processing apparatus, 

said data distribution apparatus distributes 
said content file obtained from said database device to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium , and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key file and determines the 
handling of said content data stored in said distributed 
content file based on the related decrypted usage control 
policy data . 

272. A data providing method using a plurality of 
data providing apparatuses, a data distribution 
apparatus, a plurality of management apparatuses, a 
database device, and a data processing apparatus, wherein 
said data providing apparatuses encrypt content 



data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files and key files provided 
from corresponding management apparatuses in said 
database device , 

said management apparatuses prepare key files 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses and provide the 
related prepared key files to corresponding data 
providing apparatuses , 

said data distribution apparatus distributes 
said content files and key files obtained from said 
database device to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or by recording the same on a storage medium, 
and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of said content data stored in said distributed 
content files based on the related decrypted usage 
control policy data. 



273. A data providing method using a plurality of 
data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses encrypt content 
data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files in said database device, 

said management apparatuses prepare key files 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses and provide the 
related prepared key files to said data distribution 
apparatus , 

said data distribution apparatus distributes 
said content files obtained from said database device and 
the key files provided from said management apparatuses 
to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or by 
recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 



handling of said content data stored in said distributed 
content files based on the related decrypted usage 
control policy data. 

274. A data providing method using a plurality of 
data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses, a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses encrypt content 
data by using content key data, prepare content files 
storing the related encrypted content data, and store the 
related prepared content files in said database device, 

said management apparatuses prepare key files 
storing said encrypted content key data and encrypted 
usage control policy data indicating the handling of said 
content data for the content data provided by 
corresponding data providing apparatuses and provide the 
related prepared key files to said data processing 
apparatus , 

said data distribution apparatus distributes 
said content files obtained from said database device to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 

said data processing apparatus decrypts said 



content key data and said usage control policy data 
stored in said provided key files and determines the 
handling of said content data stored in said distributed 
content files based on the related decrypted usage 
control policy data . 

275. A data providing method using a plurality of 
data providing apparatuses , a data distribution 
apparatus , a plurality of management apparatuses , a 
database device , and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files and key files 
received from the related management apparatuses in said 
database , 

said management apparatuses encrypt said master 
sources received from corresponding data providing 
apparatuses by using content key data , prepare content 
files storing the related encrypted content data, prepare 
key files storing said encrypted content key data and 
encrypted usage control policy data indicating the 
handling of said content data for the content data 
provided by corresponding data providing apparatuses , and 
send said prepared content files and said prepared key 
files to corresponding data providing apparatuses , 

said data distribution apparatus distributes 



said content files and key files obtained from said 
database device to said data processing apparatus by 
using a predetermined communication protocol but in a 
format not depending upon the related communication 
protocol or by recording the same on a storage medium, 
and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 
control policy data. 

276. A data providing method using a plurality of 
data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses, a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
apparatuses and store content files received from the 
related management apparatuses in said database, 

said management apparatuses encrypt said master 
sources received from corresponding data providing 
apparatuses by using content key data, prepare content 
files storing the related encrypted content data, send 
the related prepared content files to said data providing 
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apparatuses, prepare key files storing said encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data for the 
content data provided by corresponding data providing 
apparatuses, and send the related prepared key files to 
corresponding data distribution apparatus, 

said data distribution apparatus distributes 
said content files obtained from said database device and 
the key files provided from said management apparatuses 
to said data processing apparatus by using a 
predetermined communication protocol but in a format not 
depending upon the related communication protocol or by 
recording the same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 
control policy data . 

277. A data providing method using a plurality of 
data providing apparatuses, a data distribution 
apparatus , a plurality of management apparatuses , a 
database device, and a data processing apparatus, wherein 

said data providing apparatuses provide master 
sources of content data to corresponding management 
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apparatuses and store content files received from the 
related management apparatuses in said database, 

said management apparatuses encrypt said master 
sources received from corresponding data providing 
apparatuses by using content key data, prepare content 
files storing the related encrypted content data, send 
the related prepared content files to said data providing 
apparatuses, prepare key files storing said encrypted 
content key data and encrypted usage control policy data 
indicating the handling of said content data for the 
content data provided by corresponding data providing 
apparatuses , and provide the related prepared key files 
to said data processing apparatus, 

said data distribution apparatus distributes 
said content files obtained from said database device to 
said data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said provided key files and determines the 
handling of the content data stored in said distributed 
content files based on the related decrypted usage 
control policy data . 



278. A data providing method using a data providing 
apparatus, a data distribution apparatus , and a data 
processing apparatus, wherein 

said data providing apparatus provides a first 
module storing content data encrypted by using content 
key data, said encrypted content key data, and encrypted 
usage control policy data indicating the handling of said 
content data to said data distribution apparatus , 
performs charge processing in units of the content data 
based on log data received from said data processing 
apparatus, performs profit distribution processing for 
distributing the profit paid by interested parties of 
said data processing apparatus to interested parties of 
the related data providing apparatus and interested 
parties of said data distribution apparatus, 

said data distribution apparatus distributes a 
second module storing said encrypted content data, 
content key data and usage control policy data stored in 
said provided first module to said data processing 
apparatus by using a predetermined communication protocol 
but in a format not depending upon the related 
communication protocol or by recording the same on a 
storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 



stored in said distributed module, determines the 
handling of said content data based on the related 
decrypted usage control policy data, prepares the log 
data for the handling of the related content data and 
sends the related log data to said data providing 
apparatus . 

279. A data providing method using a data providing 
apparatus, a data distribution apparatus, a data 
processing apparatus, and a management apparatus, wherein 
said data providing apparatus provides content 

data, 

said data distribution apparatus distributes 
said content file provided from said data providing 
apparatus or a content file in accordance with the 
content data provided by said data providing apparatus 
received from said management apparatus to said data 
processing apparatus, and 

said data processing apparatus decrypts the 
usage control policy data stored in the key file received 
from said data distribution apparatus or said management 
apparatus , determines the handling of said content data 
stored in the content file received from said data 
distribution apparatus or said management apparatus based 
on the related decrypted usage control policy data, and 
further distributes said content file and key file 
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received from said data distribution apparatus or said 
management apparatus to the other data processing 
apparatus . 

280. A data providing system for distributing 
content data from a data providing apparatus to a data 
processing apparatus, wherein 

said data providing apparatus distributes a 
module storing content data encrypted by using content 
key data, said encrypted content key data, and encrypted 
usage control policy data indicating the handling of said 
content data in a format not depending upon at least one 
among existence of a compression of said content data, a 
compression method, a method of said encryption, and 
parameters of a signal giving the content data to said 
data processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 

said data processing apparatus decrypts said 
content key data and said usage control policy data 
stored in said distributed module and determines the 
handling of said content data based on the related 
decrypted usage control policy data. 

281. A data providing system as set forth in claim 
280, wherein 
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said data providing apparatus distributes said 
module further storing a certification data of itself in 
a format not depending upon the method of producing said 
certification data . 

282. A data providing system comprising a data 
providing apparatus, a data distribution apparatus, and a 
data processing apparatus, wherein 

said data providing apparatus distributes a 
first module storing content data encrypted by using 
content key data, said encrypted content key data, and 
encrypted usage control policy data indicating the 
handling of said content data in a format not depending 
upon at least one among existence of compression of said 
content data, a compression method, a method of said 
encryption, and parameters of a signal giving the content 
data to said data distribution apparatus , 

said data distribution apparatus distributes a 
second module storing said encrypted content data, 
content key data, and the usage control policy data 
stored in said provided first module to said data 
processing apparatus by using a predetermined 
communication protocol but in a format not depending upon 
the related communication protocol or by recording the 
same on a storage medium, and 

said data processing apparatus decrypts said 
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content key data and said usage control policy data 
stored in said distributed second module and determines 
the handling of said content data based on the related 
decrypted usage control policy data . 

283. A data providing system as set forth in claim 
282, wherein said data providing apparatus provides said 
first module further storing its own signature data in a 
format not depending upon the method preparation of the 
signature data to said data distribution apparatus. 

284. A data providing system comprising a data 
providing apparatus, a data distribution apparatus, and a 
data processing apparatus, wherein 

said data providing apparatus distributes a 
first module storing content data encrypted by using 
content key data, said encrypted content key data, and 
encrypted usage control policy data indicating the 
handling of said content data to said data distribution 
apparatus , 

said data distribution apparatus encrypts a 
plurality of second modules storing said encrypted 
content data, content key data, and the usage control 
policy data stored in said provided first module by using 
a common key obtained by mutual certification with said 
data processing apparatus, and then distributes the same 
to said data processing apparatus by using a 



+ 
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p t edetermined communication protocol but in a format not 
depending upon the related communication protocol, and 

said data processing apparatus comprises a 
first processing circuit for decrypting said distributed 
plurality of second modules by using said common key. 
selecting , single or a plurality of second modules from 
es.ong the related decrypted plurality of second modules, 
and performing charge processing with respect to a 
distribution service of said second modules and a tamper 
, resistant second processing circuit receiving said 

selected said second modules, decrypting said content Key 
data and said usage control policy data stored in the 
.elated second modules, and determining the handling of 

. . =»t-or! decrvpted usage 
said content data based on tu« — 

5 control policy data. 

285 . A data providing system as set forth in claim 

284, wherein 

said first processing circuit produces data 

distribution use apparatus use lo, data relating to the 

20 distribution service of the second module performed by 

the data distribution apparatus to said data distribution 

apparatus and 

said data distribution apparatus performs 

charge processing based on that data distribution 
25 apparatus use log data. 
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286. A data providing system as set forth in claim 

284 , 

further comprising a management apparatus for 
managing said data providing apparatus , said data 
distribution apparatus, and said data processing 
apparatus , wherein 

said second processing circuit determines the 
handling of said content data, prepares usage log data in 
accordance with the determination, and sends the usage 
log data to said management apparatus , and 

said management apparatus performs profit 
distribution processing for distributing the profit 
relating to the content data paid by an interested party 
of the data processing apparatus based on the usage log 
data to interested parties of the data providing 
apparatus and the data distribution apparatus based on 
the usage log data. 



